I'm moving this issue to shadow-utils (/etc/login.defs is owned by shadow-utils).
Please ignore previous comment, I updated the wrong BZ.