AOA,
I want to configure faillog on my FC7 System, so i did a following in /etc/pam.d/system-auth
auth required pam_tally.so no_magic_root
account required pam_tally.so deny=3 no_magic_root lock_time=180
but it not work means after 3 login attempts account is not lock/disabled.
***********************************************************
Also how can i isolate record from /var/log/secure from 1 - 30 of everymonth or create a new /var/log/secure from the first date of the month.