I have a ton of accounts on my server, but I have no idea which ones are actually in active use. Courier-IMAP created two files in /etc/pam.d aptly named 'imap' and 'pop3'.
Reading the man page for pam_lastlog and trying to understand how PAM works, I have tried adding 'session required pam_lastlog.so silent' to both files. (The 'silent' keyword is used to suppress the information message typically shown when using ssh or telnet to log in)
auth required pam_nologin.so
auth required pam_stack.so service=system-auth
account required pam_stack.so service=system-auth
session required pam_stack.so service=system-auth
session required pam_lastlog.so silent
Unfortunately, the monster that is PAM refuses to cooperate.... what am I doing wrong?