From 6fe81edbcd01fe58418db8096e0dc0ce88cfa7eb Mon Sep 17 00:00:00 2001
From: Juanita-Balaraj <juanita.balaraj@windriver.com>
Date: Thu, 1 Dec 2022 12:34:58 -0500
Subject: [PATCH] LDAP Linux user account lock messages are not displayed
Fixed merge conflicts
Removed Debian from the updates
Removed CentOS update
Modified the note in "Local LDAP Linux User Accounts"
Signed-off-by: Juanita-Balaraj <juanita.balaraj@windriver.com>
Change-Id: I39ee05afa87c777266df739daec323a6a4e59d06
---
.../local-ldap-linux-user-accounts.rst | 20 +++++++++++++++----
1 file changed, 16 insertions(+), 4 deletions(-)
diff --git a/doc/source/security/kubernetes/local-ldap-linux-user-accounts.rst b/doc/source/security/kubernetes/local-ldap-linux-user-accounts.rst
index bdc65849c..4aa4d6670 100644
--- a/doc/source/security/kubernetes/local-ldap-linux-user-accounts.rst
+++ b/doc/source/security/kubernetes/local-ldap-linux-user-accounts.rst
@@ -50,18 +50,30 @@ Local |LDAP| user accounts share the following set of attributes:
.. note::
+ This delay is 3 seconds.
+
You are alerted on the 6th and subsequent attempts:
``Account locked due to 6 failed logins``
and an error message is displayed on subsequent attempts:
- ``Maximum number of tries exceeded (5)``
+ When you login to the console you are alerted on the 6th, and
+ subsequent attempts:
- To clarify, 5 mins after the account is locked, the failed attempts will
- be reset and failed attempts re-counted.
+ ``The account is locked due to 5 failed logins (2 minutes left to unlock)``
-- All authentication attempts are recorded on the file ``/var/log/auth.log``
+ When you login remotely using SSH, you have 3 attempts to try
+ and login before an error ``Permission denied (publickey,password)``
+ is displayed, during an SSH login session. You can continue to login
+ by starting a new login session, until the user is locked
+ out after 5 consecutive failed attempts. For security reasons,
+ there is no reason or error displayed to the user.
+
+ 5 mins after the account is locked, the failed attempts will be
+ reset and failed attempts re-counted.
+
+- All authentication attempts are recorded on the file /var/log/auth.log
of the target host.
- Home directories and passwords are backed up and restored by the system