Issues implementing pam_faillock and pam_pwquality on Proxmox VE

[Jvg@JDN]

Hi everyone,

I’m currently hardening a Proxmox VE environment for enterprise use, but I’m running into significant issues when enabling pam_faillock and pam_pwquality.

The Issues:

• Authentication Bypass: After configuring faillock, the Proxmox Web GUI login behavior becomes erratic, sometimes accepting any password (random strings) as valid.
• Shell Lockout: I lose access to the local node shell via the Proxmox VE console, though SSH remains functional.

Does anyone have a working configuration or a "best practice" guide for integrating these modules ?