Lock users account after X attempts

[redhat at buglecreek.com]

I need a way to lock a user account after 5 attempts.  I know the
pam_tally module will do this, but it also applies to system accounts
and would require the use of the faillog command to get around this ( I
think).  I would like to find another option to do this.  Also, it would
be desirable to be able to lock it for a certain amount of time (say 15
minutes.  Then allow users to try again.

Redhat ES 4

Thank You