No subject

actually done in the 'login' program itself, right after the MOTD is
printed out.

So it's not PAM.

Under Debian, it's defined as FAILLOG_ENAB in /etc/login.defs, but
this isn't recognized under RH.

There seem to be two 'login' program sources that I can find.  One is
shipped with shadow-utils, and the other is shipped with util-linux.
The shadow-utils login binary is the one that supports the
functionality you're after, whereas the util-linux one doesn't have
any logic to be able to do this.

Under Debian, much of what would be in the RH shadow-utils package is
split into various packages like passwd, login, etc, and from what I
can tell, the login binary under Debian comes from shadow-utils
heritage.

> Does anyone know how to set this up on a redhat box?

Guess which version of the 'login' binary RH ships...

I'm not sure why there are two different versions, I'm assuming that
back when shadow passwords were new, the shadow suite shipped a login
binary as an example of how to use the shadow suite for shadow
passwords...

Someone feel free to correct me on any of this, I've wanted to be able
to do this too, but don't see an easy way to do it as easily and
nicely as it's done under Debian.

--
Adrian Chung (adrian at enfusion-group dot com)
http://www.enfusion-group.com/~adrian
GPG Fingerprint: C620 C8EA 86BA 79CC 384C E7BE A10C 353B 919D 1A17
[toad.enfusion-group.com] up 7 days, 15:39, 17 users