/etc/pam.d/common-account
lastmod 2026-11-10created 2020-11-182 edits
/etc/pam.d/common-account is the file that collects the common rules of the account type in the Linux PAM configuration of Debian and Ubuntu-based systems. Each service configuration file, such as login, su, and sshd, pulls it in with @include common-account, and it handles account validity checks such as account expiration and access time restrictions. The account stage of modules that lock accounts based on the number of failed logins, such as pam_tally and pam_tally2, is also placed here.