"pam":{}

This section provides more configuration for PAM modules.

Format

"pam": {
  "trace-file": "/tmp/pam.log",
  "pam-ibm-auth": {
    "additional-args": {
      "prompt_trans_sms"="%I) Unvalidated SMS %N\n",
      "auth_method": "password-then-choice-then-otp",
      ...
    }
    ...
  }
}

Values:

"trace-file": "/tmp/pam.log"

When set, the pam module traces it's operations into the specified trace file. It is intended for problem resolution only.

"trace-rollover": 0
Specifies the approximate maximum size in bytes of the trace-file when the file is saved and a new empty trace-file is created. The trace-file is saved by renaming it by appending the current timestamp.
"trace-localtime": false
Specifies if the trace file timestamps should be in local time. By default the timestamps use UTC.
"trace-prefix-all": false
Specifies if all trace lines should be prefixed with a timestamp. By default the IBM Security Verify REST API request/response trace capture lines are only prefixed on the first line.