Most Linux distributions install with a password cracker module activated for password changes.
Improved against off-line dictionary attack password change protocol
This approach also allows for a transparent addition to the security policy, as account lockouts and password change processes will remain unaffected.
