auth	required	pam_faillock.so preauth silent audit deny=3 unlock_time=600
auth	include		system-auth-ac
auth	[default=die]	pam_faillock.so authfail silent audit deny=3 unlock_time=600

account	required	pam_faillock.so
account	include		system-auth-ac

password include	system-auth-ac

session	 include	system-auth-ac