CVS in chroot jail

see here for details.

For x86_64,

cp `ldd bin/* sbin/* | awk '{print $3}'` lib64

should also be executed after

cp `ldd bin/* sbin/* | awk '{print $3}'` lib
.

Also, cp /lib64/ld-linux-x86-64.so.2 lib64/ since it is not globbed by the previous command (at least on Mandriva 2007).
For a clean reinstall after a distro upgrade, rm everything in /var/chroot/cvs/lib and /var/chroot/cvs/lib64 before copying.
Look in /var/log/auth.log if problem loging in.

Change /etc/ssh/sshd_config so that

UsePAM yes
UsePrivilegeSeparation no

see here.

chroot and expanding username/uid:

for the chroot cvs to find the username associated with an uid, I
added the X11R6 directory in the chroot to satisfy the
/usr/X11R6/bin/xauth which seems to be used for authentification by
CVS or SSH. I copied the libraries needed by xauth and run ldconfig -r
/var/chroot/cvs/. I also added SystemAuth=yes in CVSROOT/config which
tells CVS to look for systemauth if no username is found otherwise.
See here,
here, and
here