starlingx/docs
Code Issues Proposed changes

Merge "Fix formatting"

Browse Source
This commit is contained in:
Zuul 2022-12-20 16:34:52 +00:00 committed by Gerrit Code Review
commit 2f15495466
1 changed files with 14 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
doc/source/security/kubernetes/local-ldap-linux-user-accounts.rst
View File

@ -52,26 +52,26 @@ Local |LDAP| user accounts share the following set of attributes:
This delay is 3 seconds. This delay is 3 seconds.
You are alerted on the 6th and subsequent attempts: You are alerted on the 6th and subsequent attempts:
``Account locked due to 6 failed logins`` ``Account locked due to 6 failed logins``
and an error message is displayed on subsequent attempts: and an error message is displayed on subsequent attempts.
When you login to the console you are alerted on the 6th, and When you login to the console you are alerted on the 6th, and subsequent
subsequent attempts: attempts:
``The account is locked due to 5 failed logins (2 minutes left to unlock)`` ``The account is locked due to 5 failed logins (2 minutes left to unlock)``
When you login remotely using SSH, you have 3 attempts to try When you login remotely using SSH, you have 3 attempts to try and login
and login before an error ``Permission denied (publickey,password)`` before an error ``Permission denied (publickey,password)`` is displayed,
is displayed, during an SSH login session. You can continue to login during an SSH login session. You can continue to login by starting a new
by starting a new login session, until the user is locked login session, until the user is locked out after 5 consecutive failed
out after 5 consecutive failed attempts. For security reasons, attempts. For security reasons, there is no reason or error displayed to
there is no reason or error displayed to the user. the user.
5 mins after the account is locked, the failed attempts will be 5 mins after the account is locked, the failed attempts will be reset
reset and failed attempts re-counted. and failed attempts re-counted.
- All authentication attempts are recorded on the file /var/log/auth.log - All authentication attempts are recorded on the file /var/log/auth.log
of the target host. of the target host.