Which Linux utility is specifically used to display the number of failed authentication attempts for a user and optionally reset the counter that the pam_faillock module uses for account lockouts?
The correct utility is faillock. The pam_faillock module enforces the lockout policy, but the faillock command lets administrators query or clear the failure records stored in /var/run/faillock. Commands such as chage manage password-expiry information, id shows UID/GID data, and lastlog lists the most recent successful login for each user-none of these interact with the pam_faillock tally.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What are brute-force attacks, and how does faillock protect against them?
Open an interactive chat with Bash
What are the configuration options available for faillock?