Account lockout failure count

The account lockout feature has one attribute called: Failures Before Lockout. According to the sun doc, it is said that it is 'how many consecutive failures are allowed before Directory Server locks the account'. My question is: if the user ssh into the LDAP client and type a wrong password, do sshd and pam service all log one record for the failed attempt? In another words, does pam count one failure and the sshd count one failure (totally 2 times) or just either pam or sshd count one time failure (totally only 1 time)?

Thanks,

--xinhuan

[566 byte] By [xhza] at [2007-11-27 4:47:58]