Delay between failed logins

[john guardian]

For Trusted mode, I believe that there's a flag in /tcb "default" file.

There doesn't appear to be anything in the "security" file that governs this for SMSE. Is this taken care of somewhere within PAM, and if so, where?

Thanks.

[RJHall · Accepted solution]

That's an interesting question. I was assuming that it was just an unconfigurable setting of the application in question--something set at compile time.

[john guardian]

I believe that for PAM (used for SMSE), the built-in delay is 3 secs.

There must be some other method, perhaps using IPF?