I recently updated my kernel to 2.6.18-92.1.18.el5.028stab060.2 and the errors described by dranch just started to show up.
I get two errors:
1. sudo keeps yelling:
audit_log_user_command(): Connection refused
2. crond moans every 5 minutes in the log:
crond[30778]: pam_loginuid(crond:session): set_loginuid failed opening loginuid
could it be that someone forget to set CONFIG_AUDIT and CONFIG_AUDITSYSCALL while building the rpm kernel?
I don't want to change my pam.d-config, it's a bad workaround. It did work fine before.