pam bug fix and enhancement update

Updated pam packages that fix several bugs and add an enhancement are now
available.

Pluggable Authentication Modules (PAM) provide a system whereby
administrators can set up authentication policies, without having to
recompile programs that handle authentication.

These updated pam packages provide fixes for the following bugs:

* the pam_rhosts_auth module was not able to identify host names with
leading digits.

* the pam_unix module was not able to update passwords when it was called
from a multithreaded application.

* on systems with 32-bit user IDs (UIDs), the pam_loginuid module did not
correctly set the loginuid value in the kernel, and the module returned an
error when users with UID numbers greater than 31 bits tried to authenticate.

* certain modules, including pam_access, could fail group membership tests
on systems with groups containing a large number of members.

* the documentation for the pam_limits module has been updated to include
information stating that the Resident Set Size (RSS) limit is not enforced
on current kernels.

* the pam_limits module was unable to apply limits to users who belonged to
very large groups. The maximum size of internal buffers for group entries
has been increased so that limits still take effect even with very large
groups.

In addition, these updated pam packages provide an enhancement in the way
of an option for the pam_tally2 module that allows serialized access to the
/var/log/tallylog file. Enabling this option prevents possible failed
authentication when two separate processes attempt to authenticate nearly
simultaneously when the lock_time option ("always deny for n seconds after
a failed attempt") is set to a value of one or greater.

Users are advised to upgrade to these updated pam packages, which resolve
these issues and add this enhancement.

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

446025 - pam_tally2 race when authenticating more than once at the same time.
447842 - pam_limits PWD_ABSURD_PWD_LENGTH is still too low
459628 - Problem with man page for limits.conf
460241 - pam_loginuid fails on 32 bit uid's
469857 - pam_chauthtok() only works in main but not child threads

groups, ip, rhost, rss, tally, threads, uid