The PAM authentication uses passwd and chfn services, which files are installed by sys-apps/shadow. As I don't see (yet?) a need to move these to pambase, for now, to properly work, it should depend on sys-apps/shadow _with pam USE flag enabled_.
Feel free to make this change.
Fixed.