[no subject]

> Now, at a glance, it's nice and pretty, and works perfect... Until a reboot.
> At that point, ALL accounts, root too, are locked.  So the system is
> completely cutoff.  

I don't have that problem -- it basically Just Works for me

What does the faillog count look like before reboot? after reboot? Anything 
relevant in any of the system logs?

FWIW, my most common setup of it is something like:

auth        required      /lib/security/$ISA/pam_tally.so onerr=fail no_magic_root
auth        required      /lib/security/$ISA/pam_env.so
...

account     required      /lib/security/$ISA/pam_tally.so deny=3 reset no_magic_root even_deny_root_account
account     required      /lib/security/$ISA/pam_unix.so

later,
chris


</pre>
<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<hr>
<!--X-Follow-Ups-End-->
<!--X-References-->
<ul><li><strong>References</strong>:
<ul>
<li><strong><a name="00378" href="msg00378.html">[ale] PAM_Tally oddness</a></strong>
<ul><li><em>From:</em> magius at wittsend.com (Scott Warfield)</li></ul></li>
</ul></li></ul>
<!--X-References-End-->
<!--X-BotPNI-->
<ul>
<li>Prev by Date:
<strong><a href="msg00419.html">[ale] [OT] Voicepulse question</a></strong>
</li>
<li>Next by Date:
<strong><a href="msg00421.html">[ale] [OT] Voicepulse question</a></strong>
</li>
<li>Previous by thread:
<strong><a href="msg00378.html">[ale] PAM_Tally oddness</a></strong>
</li>
<li>Next by thread:
<strong><a href="msg00385.html">[ale] Project/Time Management and Billing Programs</a></strong>
</li>
<li>Index(es):
<ul>
<li><a href="maillist.html#00420"><strong>Date</strong></a></li>
<li><a href="threads.html#00420"><strong>Thread</strong></a></li>
</ul>
</li>
</ul>

<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->
</body>
</html>