In the latest glibc errata, the nscd package (nscd-2.1.3-19.i386.rpm) is not GPG-signed.
this was corrected in our updated glibc errata (release 21).