"{pam_module_id}": {}
Defines PAM module ID specific options. If the module argument
"id"="{pam_module_id}"
is not set in the PAM module arguments, then it defaults to
"pam-ibm-auth"
.
Values:
"additional-args": []
- Most of the PAM Module arguments for the
pam_ibm_auth
module can be moved from the PAM configuration files into this object. A few options can't be moved, such as "id" and "ibm_auth_config".For example, if the default pam module id ("pam-ibm-auth") is used, you can place the "auth_method" and "prompt_trans_sms" arguements into/etc/pam_ibm_auth.json:
"pam": { "pam-ibm-auth": { "additional-args": [ "prompt_trans_sms=%I) Unvalidated SMS %N\n", "auth_method=password-then-choice-then-otp" ] ... } }