Return
-
Title
Authentications are failing. Syslog shows -
Description
sshd[85331]: pam_vas: Authentication <failed> for <Active Directory> user: <jdoe> account: <domain\jdoe> service: <sshd> reason: <Account locked - Too many incorrect password attempts.>
-
Cause
Safeguard Authentication Services (SAS) is working as designed. The account is locked out in AD and therefore disallowed. -
Resolution
1) Check for local OS-level password configurations such as pam_tally on Linux or login retries on AIX.
What does pam_tally do:
https://support.oneidentity.com/safeguard-authentication-services/kb/4295883/what-does-pam_tally-do
Pam_tally configuration:
https://support.oneidentity.com/safeguard-authentication-services/kb/4347570/
AIX local account lockout settings:
https://support.oneidentity.com/safeguard-authentication-services/kb/4213042/
2) If there are no local lockout configurations or if the local configurations are working as expected then work with your Active Directory (AD) teams to determine why the account is becoming locked out. That's where it's originating (AD), and why any system that uses that account would track it being locked out.