From 719a6e722a0d487b292331ad438137da02ef0323 Mon Sep 17 00:00:00 2001
From: Pavel Březina <pbrezina@redhat.com>
Date: May 04 2017 12:09:12 +0000
Subject: use also preauth phase of pam_faillock


---

diff --git a/authinfo.py b/authinfo.py
index 35f967e..3bb610f 100644
--- a/authinfo.py
+++ b/authinfo.py
@@ -437,6 +437,8 @@ pam_modules = [[] for service in (STANDARD, POSTLOGIN, PASSWORD_ONLY, FINGERPRIN
 pam_modules[STANDARD] = [
 	[True,  AUTH,		LOGIC_REQUIRED,
 	 "env",			[]],
+	[False,  AUTH,		LOGIC_REQUIRED,
+	 "faillock",		["preauth", "silent"]],
 	[False,  AUTH,          LOGIC_SKIPNEXT,
 	 "succeed_if",		argv_succeed_if_nonlogin],
 	[False,  AUTH,          LOGIC_PKCS11,
@@ -556,6 +558,8 @@ pam_modules[POSTLOGIN] = [
 pam_modules[PASSWORD_ONLY] = [
 	[True,  AUTH,		LOGIC_REQUIRED,
 	 "env",			[]],
+	[False,  AUTH,		LOGIC_REQUIRED,
+	 "faillock",		["preauth", "silent"]],
 	[False, AUTH,		LOGIC_REQUIRED,
 	 "deny",		[]],
 	[False, AUTH,		LOGIC_SKIPNEXT_ON_FAILURE,
@@ -638,6 +642,8 @@ pam_modules[FINGERPRINT] = [
 	[True,  AUTH,		LOGIC_REQUIRED,
 	 "env",			[]],
 	[False,  AUTH,		LOGIC_REQUIRED,
+	 "faillock",		["preauth", "silent"]],
+	[False,  AUTH,		LOGIC_REQUIRED,
 	 "deny",		[]],
 	[False,  AUTH,		LOGIC_SUFFICIENT,
 	 "fprintd",		[]],
@@ -692,6 +698,8 @@ pam_modules[FINGERPRINT] = [
 pam_modules[SMARTCARD] = [
 	[True,  AUTH,		LOGIC_REQUIRED,
 	 "env",			[]],
+	[False,  AUTH,		LOGIC_REQUIRED,
+	 "faillock",		["preauth", "silent"]],
 	[False,  AUTH,		LOGIC_SUFFICIENT,
 	 "sss",			argv_sssd_missing_name],
 	[False,  AUTH,		LOGIC_PKCS11,