--- shadow-4.1.2.2.org/src/login.c	2008-11-22 23:54:54.000000000 +0000
+++ shadow-4.1.2.2/src/login.c	2012-07-08 22:45:16.400569326 +0100
@@ -668,7 +668,7 @@
 			    failent_user = "UNKNOWN";
 			  }
 
-			  if (retcode == PAM_MAXTRIES || failcount >= retries) {
+			  if (retcode == PAM_MAXTRIES || failcount > retries) {
 			    SYSLOG ((LOG_NOTICE,
 				    "TOO MANY LOGIN TRIES (%d)%s FOR `%s'",
 				    failcount, fromhost, failent_user));
