When PAM is included in a build there should be a set of /lib/security/pam_*.so or /lib64/security/pam_*.so files included in the target rootfs. This is working for the version of PAM which matches the default rootfs type (32- or 64-bit) but not for the alternate when added.
Manually install the missing 32-bit packages.
$ configure --enable-board=qemux86-64 --enable-rootfs=glibc_cgl --enable-kernel=cgl Add 32-bit version of PAM to the 64-bit rootfs: $ make -C build lib32-libpam.addpkg $ make fs Look for "security" directory/content: $ find export/dist/ -name security export/dist/lib64/security export/dist/etc/security export/dist/usr/lib64/security Notice that only the lib64 version is present. Many of the pam_*.so files come from the pam-plugin-*.rpm files and these packages are being built for the 32-bit version as well as the 64-bit version, they are just not being installed.