convissor/login-security-solution — pull request #31 by LinuxBozo (2014-05-23 19:19:14+00:00)
Title: Feature/Automatic disabling of accounts after # of failed logins

This address [NIST 800-53](http://en.wikipedia.org/wiki/NIST_Special_Publication_800-53) Control AC-7 requirements that are currently missing, specifically, automatic disabling of the account, and allowing the Administrator to manually re-enable the account. The delay tiers that are currently built-in satisfy the other requirements.

The control specifies:
>a. Enforces a limit of [Assignment: organization-defined number] consecutive invalid login
>attempts by a user during a [Assignment: organization-defined time period]; and
>b. Automatically [Selection: locks the account/node for an [Assignment: organization-defined
>time period]; locks the account/node until released by an administrator; delays next login
>prompt according to [Assignment: organization-defined delay algorithm]] when the
>maximum number of unsuccessful attempts is exceeded. The control applies regardless of
>whether the login occurs via a local or network connection.