I've just split cracklib-devel out into a subpackage to close bug #203569, and the pam_cracklib module links against libcrack, so I expect you'll need to add a BuildRequires: on cracklib-devel to avoid regressions or build problems.