vCenter Inactive User Deactivation configuration parameter missing after vCenter upgrade

Products

• VMware vCenter Server

Issue/Introduction

• After vCenter upgrade to version 8.0.3 the parameter below is missing from /etc/pam.d/system-auth

  auth    required    pam_lastlog.so inactive=90

• • 

Environment

• vSphere vCenter Server 8.X

Cause

• This is expected behavior
• The parameter auth    required    pam_lastlog.so inactive=90 is not built in by default

Resolution

• No further action is needed, this is expected behavior 
• Adding the parameter above to the /etc/pam.d/system-auth may result in root account to be in lockout state as it may not be compatible with other parameters listed 

Additional Information

• Read more at VMware Virtual Appliances and customizations to operating system and included packages