diff --git a/tasks/install.yml b/tasks/install.yml
index 0800dc9..7603eb5 100644
--- a/tasks/install.yml
+++ b/tasks/install.yml
@@ -28,6 +28,16 @@
         mode: 0640
       notify: __cupsd_restart
 
+    - name: Update pamd rule's control in /etc/pam.d/cups
+      pamd:
+        name: cups
+        type: "{{ item.type }}"
+        control: "{{ item.control }}"
+        module_path: "{{ item.module }}"
+        module_arguments: "{{ item.arguments | default(omit) }}"
+        new_module_path: "{{ item.new_module }}"
+      loop: "{{ __pam_config }}"
+
     - name: Open ports in iptables
       iptables_raw:
         name: "{{ item.name }}"
diff --git a/vars/main.yml b/vars/main.yml
index fcf86d0..d26264c 100644
--- a/vars/main.yml
+++ b/vars/main.yml
@@ -4,3 +4,13 @@ __cups_rpm_files:
   - /var/tmp/cups-devel-2.2.10-0.x86_64.rpm
   - /var/tmp/cups-libs-2.2.10-0.x86_64.rpm
   - /var/tmp/cups-lpd-2.2.10-0.x86_64.rpm
+
+__pam_config:
+  - type: "auth"
+    control: "required"
+    module: "pam_unknown.so"
+    new_module: "pam_unix.so"
+  - type: "account"
+    control: "required"
+    module: "pam_unknown.so"
+    new_module: "pam_unix.so"