Comment 8 for bug 302026

I can confirm that installing libpam-cracklib works around the issue: it stacks a pam_cracklib module in first position that correctly stores old/new passwords for later modules.