Previously the pam_tally utility was included in the redhat errata package
(pam-0.72-24). After installing RedHat 7.0 pam_tally is no longer present
although the pam_tally.so library is. This is a problem because when the
using pam_tally.so library to limit failed logins, there is no way to
reset them without the pam_tally utility. I'd really prefer to get an
official fix released rather then have to get it from the rawhide release.
Unfortunately we're not likely to issue updates to PAM unless security problems
are found in it. The next Raw Hide build will include the application, and it
shouldn't fall out of the Makefile again. I'll leave this bug open until it
gets resolved one way or another.
An update to fix #18889 will include this fix as well. Please verify that the
pam-0.72-32 package in http://people.redhat.com/nalin/test/ fixes this for you.
The last errata release includes the helper app, and the .spec file now requires
it to be there, which will cause the package build to fail if it's not included.