改多路认证情况下，如果认证失败，交由failock模块计数

0010-fix-multi-channel-auth-If-the-authentication-fails-t.patch

@@ -0,0 +1,30 @@
+From 3af3972404b72f71851995e0d4e89bdb4ce29862 Mon Sep 17 00:00:00 2001
+From: liuxinhao <liuxinhao@kylinsec.com.cn>
+Date: Sat, 3 Jun 2023 17:08:16 +0800
+Subject: [PATCH] fix(multi-channel auth): If the authentication fails, the
+ faillock module counts the data
+MIME-Version: 1.0
+Content-Type: text/plain; charset=UTF-8
+Content-Transfer-Encoding: 8bit
+
+- 修改多路认证情况下，如果认证失败，交由failock模块计数
+---
+ data/kiran-authentication-service | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/data/kiran-authentication-service b/data/kiran-authentication-service
+index e0f2763..8bbbea7 100644
+--- a/data/kiran-authentication-service
++++ b/data/kiran-authentication-service
+@@ -6,7 +6,7 @@
+ 
+ # =========================认证配置项目================================ #
+ # 多路认证模式，成/功则认证通过，失败/切换到密码 跳过多因子认证模式
+-auth  [success=done ignore=2 default=die] pam_kiran_authentication.so doauth
++auth  [success=done ignore=2 default=bad] pam_kiran_authentication.so doauth
+ # 多因子认证模式, 成功继续执行PAM流程栈,失败或默认值都为失败
+ #auth  [success=2 default=bad] pam_kiran_authentication.so doauth
+ # ==================================================================== #
+-- 
+2.33.0
+

kiran-authentication-service.spec

@@ -1,6 +1,6 @@
 Name:          kiran-authentication-service
 Version:       2.5.1
-Release:       4
+Release:       5
 Summary:       Kiran Desktop kiran authentication service
 License:       MulanPSL-2.0
 URL:           http://www.kylinsec.com.cn
@@ -16,6 +16,7 @@ Patch0006:	0006-fix-default-device-Device-adapters-do-not-update-def.patch
 Patch0007:	0007-fix-multi-factor-Multifactor-authentication-handling.patch
 Patch0008:	0008-fix-default-device-Update-the-logic-of-the-default-a.patch
 Patch0009:	0009-fix-multi-factor-multi-factor-no-jump-login.patch
+Patch0010:	0010-fix-multi-channel-auth-If-the-authentication-fails-t.patch
 
 BuildRequires: systemd
 BuildRequires: systemd-devel
@@ -91,6 +92,9 @@ systemctl enable kiran-authentication-daemon.service
 %{_includedir}/kiran-authentication-service/kas-authentication-i.h
 
 %changelog
+* Sat Jun 03 2023 liuxinhao <liuxinhao@kylinsec.com.cn> - 2.5.1-5
+- KYOS-B:  If the authentication fails, the faillock module counts the data(#I7937W)
+
 * Fri Jun 02 2023 liuxinhao <liuxinhao@kylinsec.com.cn> - 2.5.1-4
 - KYOS-B: Device adapters do not update default devices that do not exist
 - KYOS-B: Multifactor authentication, handling only password authentication