PowerProtect Data Manager Appliance 5.15.0.0 Security Configuration Guide for DM5500

Configure SSH session login delay interval

This topic changes the timeout delay after failed PowerProtect Data Manager Appliance SSH console login attempts. You can use these steps to implement a gradual delay instead of a hard lockout.

1. Connect to the PowerProtect Data Manager Appliance console and change to the root user.
2. Using a Linux text editor, open /etc/pam.d/sshd.
3. Locate the line that begins with auth optional pam_faildelay.so.
   If this line does not exist, add the line to the start of the file.
4. Change this line to implement the new login delay interval:

   auth optional pam_faildelay.so delay=<newinterval>

   where <newinterval> is the delay in seconds * 1000000. For example, a 60-second delay:

   auth optional pam_faildelay.so delay=60000000

5. Save and close the file.
6. Reload the SSH daemon to apply the changes:
   systemctl reload sshd