Previously the pam_tally utility was included in the redhat errata package (pam-0.72-24). After installing RedHat 7.0 pam_tally is no longer present although the pam_tally.so library is. This is a problem because when the using pam_tally.so library to limit failed logins, there is no way to reset them without the pam_tally utility. I'd really prefer to get an official fix released rather then have to get it from the rawhide release.
Unfortunately we're not likely to issue updates to PAM unless security problems are found in it. The next Raw Hide build will include the application, and it shouldn't fall out of the Makefile again. I'll leave this bug open until it gets resolved one way or another.
An update to fix #18889 will include this fix as well. Please verify that the pam-0.72-32 package in http://people.redhat.com/nalin/test/ fixes this for you.
The last errata release includes the helper app, and the .spec file now requires it to be there, which will cause the package build to fail if it's not included.