PAM in RHEL6 vs RHEL7

[Tomas Mraz]

On Wed, 2017-06-21 at 14:35 -0400, Bertrand Rault wrote:
> Hello, 
> 
> Would any of you know what changed or was deprecated between RHEL6
> and RHEL7 with regards to PAM and its functionality? 
> If you have any info that could be shared about this, let me know. 

Just the most important things from top of my head:

pam_tally, pam_tally2 is deprecated in favor of pam_faillock
pam_cracklib, pam_pwquality is deprecated in favor of pam_pwquality
pam_console is deprecated without replacement (its functionality is
mostly handled by systemd in slightly different way)
pam_unix remember option is deprecated in favor of pam_pwhistory

-- 
Tomáš Mráz
Red Hat

No matter how far down the wrong road you've gone, turn back.
                                              Turkish proverb
[You'll know whether the road is wrong if you carefully listen to your
conscience.]

 * Google and NSA associates, this message is none of your business.
 * Please leave it alone, and consider whether your actions are
 * authorized by the contract with Red Hat, or by the US constitution.
 * If you feel you're being encouraged to disregard the limits built
 * into them, remember Edward Snowden and Wikileaks.