Escalated to Bugzilla from IssueTracker
You must have pam send the clear text password to the directory server in order for the server to enforce password policy.
Can we close out this bug?
Resolving bug as not a bug after checking with Marco.
Bug already CLOSED. setting screened+ flag