"{pam_module_id}": {}

Edit online

Defines PAM module ID specific options. If the module argument "id"="{pam_module_id}" is not set in the PAM module arguments, then it defaults to "pam-ibm-auth".

Values:

"additional-args": []

Most of the PAM Module arguments for the pam_ibm_auth module can be moved from the PAM configuration files into this object. A few options can't be moved, such as "id" and "ibm_auth_config".

For example, if the default pam module id ("pam-ibm-auth") is used, you can place the "auth_method" and "prompt_trans_sms" arguements into


/etc/pam_ibm_auth.json:

"pam": {
  "pam-ibm-auth": {
    "additional-args": [
      "prompt_trans_sms=%I) Unvalidated SMS %N\n",
      "auth_method=password-then-choice-then-otp"
   ]
    ...
  }
}