Trying one more time to bisect this, I ended up at 04143fd68dbc656905714eff5c208fadb3464e25 as the commit that introduced the "slock: getpwuid: cannot retrieve shadow entry (make sure to suid or sgid slock)" error for my environment. This was with replacing HAVE_SHADOW with HAVE_PAM.
I tried the pam_auth patches and none of them applied cleanly against 1.4. -- andy