Change password timeout on Linux?

Question

If I type in the wrong password at login, then the system forces me to wait for about a second before I can retry. Is there a way to reduce this timeout? Also, is there a global timeout setting for su and sudo or do I have to change those timeouts using a different method?

Answer 1

change the FAIL_DELAY line in /etc/login.defs. That should affect both login and su. But why would you want to do that ?

Answer 2

Checking out /etc/login.defs on Ubuntu 11.10 I see that the config option that b0fh mentions has been moved to the /etc/pam.d/login file as:

auth       optional   pam_faildelay.so  delay=3000000

which I changed from 3 sec. to half a second in order to lessen the effect of my bad habit of often getting my password wrong on the first go. (I consider the added risk of a brute-force attack taking one-sixth of the time it would have taken otherwise is a negligible factor)