A simple 'make' should suffice to build pam_subid.so, which should be
placed in /lib/security, or whereever your distribution keeps its PAMs.
Thereafter, a line such as 

auth sufficient pam_subid.so

in whichever files you wish should suffice to allow somebody with a
sub-user to be able to become that sub-user without entering a password.
