The requirement for pam-devel is indeed listed on http://port389.org/wiki/Building , though having configure.ac doing a gratitious check would be nice (it does not do so as of 1.2.11.12).