PAM rule Processing Order

• Control
• Required
• If module fails, request is denied, continues processing
• If module succeeds, continues
• Requisite
• If module fails, request is denied, stops processing
• If module succeeds, continues
• Sufficient
• If module succeeds, and no earlier module failed, request is granted, stops processing

PAM requests are processed from top to bottom