Undefined one of the customer is having very appropriate query:
Any plans to add pam_lastlog2.so support to RHEL 9.x? Our produce is currently locked to version 9.4. is our only solution to build pam_lastlog2.so (from util-linux 2.40+) on our own and add it to the system?
pam_lastlog.so has at least two problems. Firstly, its use of a sparse file /var/log/lastlog which is proportional in size to the largest user ID. When using sssd joined to an Active Directory domain, the user ID numbers can be massive (100s of millions) causing the reported size of lastlog to balloon to many GBs. This is a well-known issue:
Secondly, pam_lastlog is not Y2038 safe.
pam_lastlog2.so solves both issues.\
current version:
cat etc/redhat-release
Red Hat Enterprise Linux release 9.4 (Plow)
[supportshell-1.sush-001.prod.us-west-2.aws.redhat.com] [13:15:22+0000]
[rakkumar@supportshell-1 sosreport-NetAcq66210665-pam-log2-support-case-2025-10-16-qygcpsh]$ cat installed-rpms | grep pam
mod_authnz_pam-1.2.2-3.el9.x86_64 Thu Oct 16 10:52:43 2025
pam-1.5.1-24.el9_4.1.x86_64 Thu Oct 16 10:52:31 2025
pam_radius-2.0.0-4.el9.x86_64 Thu Oct 16 10:54:39 2025
systemd-pam-252-32.el9_4.8.x86_64 Thu Oct 16 10:52:45 2025
[supportshell-1.sush-001.prod.us-west-2.aws.redhat.com] [13:15:28+0000]
[rakkumar@supportshell-1 sosreport-NetAcq66210665-pam-log2-support-case-2025-10-16-qygcpsh]$ cat installed-rpms | grep util-linux
util-linux-2.37.4-18.el9.x86_64 Thu Oct 16 10:52:31 2025
util-linux-core-2.37.4-18.el9.x86_64 Thu Oct 16 10:52:30 2025
[supportshell-1.sush-001.prod.us-west-2.aws.redhat.com] [13:15:51+0000]
[rakkumar@supportshell-1 sosreport-NetAcq66210665-pam-log2-support-case-2025-10-16-qygcpsh]$
