Skip to main content

Linux SSH: BlockID Configurations

This guide will help you configure the Linux PAM (Pluggable Authentication Modules) module with specific settings. The parameters you provided are:

BlockID Attributes

AttributeDescription
authtypeRepresents the authentication type.
requestTimeoutSpecifies the session poll timeout.
passwordEnabledEnables or disables password authentication.
otpEnabledEnables or disables BlockID one-time password (OTP) authentication.
pushEnabledEnables or disables push notification for authentication.
smsOtpEnables or disables BlockID one-time password (OTP) authentication via SMS.
emailOtpEnables or disables BlockID one-time password (OTP) authentication via email.
logLevelSets the logging level.
enforceMfaEnforces multi-factor authentication (MFA). If set as false, BlockID PAM allows login to local/non-1K users; if set as true, BlockID PAM does not allow login to local/non-1K users.
allowUserSelectionAllows user to select authentication method. If set as true, BlockID PAM shows login options to the user. User can choose either of the options shown to them to login. If set as false, BlockID PAM does not show login options to the user. And prompt the user for all the mechanisms configured in the CaaS.

Attribute Default Values

Following are the default values used :

AttributeDefault values
authTypefingerprint
requestTimeout45
passwordEnabledfalse
smsOtptrue
emailOtptrue
otpEnabledtrue
pushEnabledtrue
enforceMfafalse
allowUserSelectiontrue
logLevelINFO