Name: RevPi - FailLock brute-force protection (using pam_unix)
Default: yes
Priority: 900

Auth-Type: Primary
Auth-Initial:
    requisite pam_faillock.so preauth silent
    [success=1 default=ignore] pam_unix.so nullok
    [default=die] pam_faillock.so authfail
    [success=end default=ignore] pam_faillock.so authsucc
Auth:
    requisite pam_faillock.so preauth silent
    [success=1 default=ignore] pam_unix.so nullok try_first_pass
    [default=die] pam_faillock.so authfail
    [success=end default=ignore] pam_faillock.so authsucc
Account-Type: Additional
Account:
    required pam_faillock.so
