pam_faillock

Hi,

As per an audit finding, I need to set pam_faillock setting in the following pam.d files,

/etc/pam.d/login,
/etc/pam.d/sshd
/etc/pam.d/su, /etc/pam.d/su-l
/etc/pam.d/sudo, /etc/pam.d/sudo-i

When I set the following faillock settings in the /etc/pam.d/sshd file, we are unable to connect to the system,

auth required pam_faillock.so preauth silent audit deny=3 even_deny_root unlock_time=1200
auth [default=die] pam_faillock.so authfail audit deny=3 even_deny_root unlock_time=1200

account required pam_faillock.so

We are aware that the order of the commands in these config files is important.