I am trying to implement account lockout in ubuntu using pam_tally. I have tried adding the follwing lines in /etc/pam.d/common-auth
auth required pam_tally.so deny=3 account required pam_tally.so
The failures are getting logged but account is not getting locked even on reaching max failures. I am trying this by directly loggging in (GNOME login screen).
Any advices? Do I need to add in pam.d/gdm or login file also?