Pam is one of the things most administrators don't want o touch. Because ist is usually not necessary to touch. So what is it? Pam tells you what functions (libraries) you need to authenticate or authorize. What functions you require and what functions you may also can use. And in what order. PAM stands for "pluggable autentication module".