class common::pam {
  $source_exists = source_exists("default","/etc/pam.d/common-session")
  file { "/etc/pam.d/common-session":
    owner => root, group => root, mode => 0644,
    if $source_exists {
      source => "puppet://$policyhost/default/etc/pam.d/common-session"
    }
    else {
      content => template("pam.d/common-session")
    }
  }
}