Crap. You're right. It's funny how this wasn't picked up in the past (e.g. RHEL5 content). To ensure this gets addressed as part of the RHEL6 STIG feedback, can you forward your note to DISA FSO ( disa.letterkenny.FSO.mbx.stig-customer-support-mailbox@mail.mil)? This will create a formal tracking ticket to make sure we sort this out.
Shawn,
There is no /etc/pam.d/password-auth{,-ac} in RHEL5, not even in the man pages, unless my test system is severely broken.
Thanks, Leland -- Leland Steinke, Security+ DISA FSO Technical Support Contractor tapestry technologies, Inc 717-267-5797 (DSN 570) leland.j.steinke.ctr@mail.mil (gov't) lsteinke@tapestrytech.com (com'l)