[Pkg-shadow-devel] Bug#87648: Is login really using PAM for the fail delay?

[Christian Perrier]

While looking at http://bugs.debian.org/87648, I was surprised to see
that the delay for failed logins seems to be only coming from
FAIL_DELAY in /etc/login.defs

Our /etc/pam/d/login file in Debian includes common-auth which
includes:

auth	required	pam_unix.so nullok_secure

adding "nodelay" to this does not have any effect on login while it
removes the delay for su, for instance.

The only way to configure the fail delay in login still seems to be
FAIL_DELAY.

Tomasz, is this still a minor leak in PAMification?

--