Authentication systems are constantly evolving, and it is important to shield the system administrator and application programmers from such changes. The Pluggable Authentication Module (PAM) framework allows a system administrator to dynamically change the authentication schemes used by programs such as login, ftpd, and passwd. This talk will discuss how the PAM system uses dynamically linked shared libraries to provide plugability for the functions of system authentication and account, session, and password management.