lock inactive users

[Alan DeKok]

\On May 8, 2018, at 4:23 AM, Eero Volotinen <eero.volotinen at iki.fi> wrote:
> 
> We are using pam + google authenticator to authenticate our users. How to
> implement 90 day inactivity user lockout?

  Use a database.  Write the last login to a database.  When a user is logging in, check the database.

> This must be very stupid question, but still asking.. as I didn't way to
> way to implement  this. tried pam_lastlog on /etc/pam.d/radiusd, but I
> didn't worked..

  This is an unusual configuration.  There is no pre-packaged solution which does what you want.  You will have to configure it yourself.

  Alan DeKok.