In message <200309251020.h8PAK8d1027023@vtn1.victoria.tc.ca>, John Nemeth write
s:
>     Does the use of the word "defaults" here imply that an application
>can select the modules that it wants to use and override the choices
>made by the administrator?  This isn't possible in PAM.

Applications can do whatever they want, and so can login classes.

For instance
	auth-ftp-defaults:krb-or-pwd

	daemon:auth-ftp=passwd:
means that ftp will use krb-or-pwd for most users, but only passwd for
users in class daemon.

-s