Targeted at samba, but gives a good general pam overview