These two entries in contrib/redhat/sshd.pam can be removed: 1. session required pam_limits.so 2. session optional pam_console.so No 1. is included in system-auth. No 2. is pointless (in a standard configuration) because the module is supposed to handle local logins.
Fixed - thanks.