Set account to NOT autounlock following login attempt failures

Well, my title pretty much says it. How do I "Set account to NOT autounlock following login attempt failures"? I've configured /etc/default/passwd to my organization's security policy but I have yet to work out how to set the account to stay locked after the user fails to authenticate a few times. What am I missing?

I have not yet met a "lock after failed logins" in Solaris pam_unix.
Do you have an additional pam like pam_tally? (in /etc/pam.conf)

---------- Post updated at 08:08 AM ---------- Previous update was at 08:03 AM ----------

Just saw the following:
Solaris 10 /etc/default/login refers to

man user_attr

that refers to /etc/security/policy.conf

man user_attr

See the section on "lock_after_retries".