Using pam_cracklib and pwscore

Hi,

I have an fc17 system and wanted to configure password strength capabilities. However, it appears that pam_cracklib isn't implemented in /etc/pam.d/passwd.

Do I need to modify this file as per the pam_cracklib man page?

It says that it can enforce changes such as the number of differences from the old password. How does it know what the old password is? I assume the application changing the password would have to prompt the user for it, so it can be provided to pam_cracklib?

Are there any cracklib experts on this forum?

Thanks,
Alex