---

astra@astra:~$ grep -E "pam_tally2" /etc/pam.d/common-auth /etc/pam.d/common-account
/etc/pam.d/common-auth:auth required pam_tally2.so deny=2 unlock_time=900 even_deny_root
/etc/pam.d/common-auth:account required pam_tally2.so