On Tue, Apr 21, R Coley wrote: > I have a couple of design questions.. > > Firstly, is there any guarantees (ie. Is it a documented standard) > regarding the order that the pam framework calls the pam module > functions? Can you safely assume across all platforms that it is in > the order specified in the config file? Depends. For a type like auth, acct, password, session, the modules will be called in the order you define in the config file. The order of auth, acct, password, session depends on the implementation of the calling application. > My second question regards perhaps extending login functionality, to > perform account lockout upon failed authentication. Exists already in Linux-PAM: pam_tally2 Maybe you should start reading the PAM documentation? Thorsten -- Thorsten Kukuk, Project Manager/Release Manager SLES SUSE LINUX Products GmbH, Maxfeldstr. 5, D-90409 Nuernberg GF: Markus Rex, HRB 16746 (AG Nuernberg) _______________________________________________ Pam-list mailing list Pam-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/pam-list