PAM Resources

4 different resources are specified for each server that works with PAM.

Session - when a client connects to a server, a new session is created. This session may be terminated by the server, or passed on to another process that will continue serving this session. The session is used to set up the system for the user (mounting directories, creating log entries),or perform cleanup operations at the end of the session.

Authentication - Each session must pass some authentication, in which the server verifies that the user is really who he/she claims to be, as well as establishing what groups the user is part of.