2

Am I missing something or has the pam_tally2 module and binary been moved to a different package in 22.04?

The libpam-modules and libpam-modules-bin packages are installed but there is no pam_tally2 binary or pam_tally2.so on the machine.

Any ideas?

DeanW
  • 21
  • 1
  • 1
  • 2

3 Answers3

3

The pam_tally2 (and pam_tally) modules are no longer built and pam_faillock is the replacement.

From the changelog for pam (the source package for libpam-modules)

Date: Mon, 28 Dec 2020 06:05:13 +0000
...
   * Drop pam_tally and pam_tally2 modules, which have been deprecated
     upstream in favor of pam_faillock.  Closes: #569746, LP: #772121.

These are the bug reports referenced in that comment

The pam_faillock man page

  • Thanks Andrew. Makes sense and i have moved it over to faillock now. – DeanW May 24 '22 at 18:04
  • how to remove the modules? They are preventing OS upgrade. I understand they have been removed from PAM and it tells me that I need to remove the use of these 2 modules but I haven't been able to find out how to actually do that. – Anon Ymus Sep 07 '22 at 15:09
1

If Ubuntu won't allow you to upgrade from 20.04 to 22.04 you will need to run grep or find within the /etc/pam.d folder and locate instances in the config files of pam_tally and pam_tally2.

For instance: sudo find /etc/ -type f -exec grep -l -i "pam_tally" {} \;

Simply commenting out the entries was not enough for us - we had to completely remove the lines AND any .bak files we created with pam_tally in them. Good luck!

hambyte
  • 11
0

I can see the man page is available for pam_tally2 under ubuntu 22.04 jammy. https://manpages.ubuntu.com/manpages/jammy/man8/pam_tally2.8.html

Vikas
  • 1