class nodo::subsystem::pam(
  $enable = hiera('nodo::pam::enable', false)
) {
  if $enable != false {

    # Squeeze only
    if $::lsbdistcodename == 'squeeze' {
      # pam - login
      file { "/etc/pam.d/login":
        source  => [ "puppet:///modules/nodo/etc/pam.d/login.${::lsbdistcodename}",
                     "puppet:///modules/nodo/etc/pam.d/login",
                   ],
        owner   => "root",
        group   => "root",
        mode    => 0644,
        ensure  => present,
      }

      # pam - gdm
      file { "/etc/pam.d/gdm":
        source  => "puppet:///modules/nodo/etc/pam.d/gdm",
        owner   => "root",
        group   => "root",
        mode    => 0644,
        ensure  => present,
      }
    }

    # pam - mountpoints
    file { "/etc/security/pam_mount.conf.xml":
      ensure  => present,
      owner   => root,
      group   => root,
      mode    => 0644,
      source  => [ "puppet:///modules/site_nodo/security/pam_mount.conf.xml.${::lsbdistcodename}",
                   "puppet:///modules/site_nodo/security/pam_mount.conf.xml",
                 ],
    }
  }
}