Ubuntu

ubuntu 22.04: pam_tally preventing update

Asked by R H

I recently upgraded to ubuntu 22.04 and the upgrade was successful but now I am not able to update the packages as it is prevented by the following message

The pam_tally and pam_tally2 modules have been removed from PAM. You are using one of these modules in your PAM configuration in /etc/pam.d. You must remove the uses of these modules before PAM can be upgraded; including these modules in your PAM configuration after the upgrade will stop users from being able to log into the system.

Consider the pam_faillock module as a replacement for pam_tally.

Please advise on how to remove the uses of these modules as advised in the error message.

Question information

Language:
English Edit question
Status:
Answered
For:
Ubuntu Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
Manfred Hampl (m-hampl) said : 		#1

What is the output of the command (to be executed in a terminal window):

grep -i pam_tally /etc/pam.d/*

Revision history for this message
R H (rhsgubuntu) said : 		#2

For the query

            What is the output of the command (to be executed in a terminal window):

            grep -i pam_tally /etc/pam.d/*

the output is as follows

/etc/pam.d/common-account:account required pam_tally2.so
/etc/pam.d/common-auth:auth required pam_tally2.so preauth silent audit deny=5 unlock_time=900

Revision history for this message
Manfred Hampl (m-hampl) said : 		#3

You have to modify the files /etc/pam.d/common-account and /etc/pam.d/common-auth and remove the references to pam_tally2.so
Replace them by pam_faillock.so (with the correct parameters for pam_faillock, see e.g. the man pages for details).

Can you help with this problem?

Provide an answer of your own, or ask R H for more information if necessary.

To post a message you must log in.