Fedora Account System
Red Hat Associate
Red Hat Customer
Currently libpwquality.conf file specifies over 10 different options. Rate limiting is even harder to set up. Configuring it in a way that meets NIST SP 800-63-3 requirements is hard or at least non trivial. It should be possible to set a single variable, specifying the required security level that would guarantee safe operation, in a manner similar to FIPS mode. this will require ability to measure password's guessing entropy and support from different pam modules to enforce rate limiting
See also: https://www.troyhunt.com/ive-just-launched-pwned-passwords-version-2/
Can you tell us why this bug exists? I would think this would be something you would need to convince the maintainer to do...
+1, Kevin, I as PAM maintainer am not convinced. Also this would probably need to be at least partially implemented in authselect, which is the new replacement for authconfig, that will be configuring the PAM stacks in future Fedora releases.