diff --git a/slurm.spec b/slurm.spec
index 3420e6bb2edc01c7030777457e3ab1979ea3ee06..44c03f70454f6295eee000c438c0a3374ca9c43a 100644
--- a/slurm.spec
+++ b/slurm.spec
@@ -112,10 +112,6 @@ BuildRequires: ncurses-devel
 BuildRequires: pkgconfig
 %endif
 
-%if %{slurm_with pam}
-BuildRequires: pam-devel
-%endif
-
 %if %{slurm_with readline}
 BuildRequires: readline-devel
 %endif
@@ -287,6 +283,19 @@ Requires: slurm
 %description sjstat
 Perl tool to print SLURM job state information.
 
+%if %{slurm_with pam}
+%package pam_slurm
+Summary: PAM module for restricting access to compute nodes via SLURM.
+Group: System Environment/Base
+Requires: slurm
+BuildRequires: slurm-devel pam-devel
+%description pam_slurm
+This module restricts access to compute nodes in a cluster where the Simple
+Linux Utility for Resource Managment (SLURM) is in use.  Access is granted
+to root, any user with an SLURM-launched job currently running on the node,
+or any user who has allocated resources on the node according to the SLURM
+%endif
+
 #############################################################################
 
 %prep
@@ -559,6 +568,13 @@ rm -rf $RPM_BUILD_ROOT
 %{_bindir}/sjstat
 #############################################################################
 
+%if %{slurm_with pam}
+%files slurm_pam
+%defattr(-,root,root)
+%{_libdir}/security/pam_slurm.so
+%endif
+#############################################################################
+
 %pre
 #if [ -x /etc/init.d/slurm ]; then
 #    if /etc/init.d/slurm status | grep -q running; then