class common::pam {
  $source_exists = source_exists("default","/etc/pam.d/common-session")

  if $source_exists == "true" {
     File{
        source => "puppet://$policyhost/default/etc/pam.d/common-session"
     }
  } else {
     File{
        content => template("pam.d/common-session")
     }
  }

  file { "/etc/pam.d/common-session":
    owner => root, group => root, mode => 0644,
  }
}