Heimdal has a function for using cracklib to check the password quality, this does not seem to be installed by default. Source is in lib/kadm5, can build shared object with the command line: gcc -fPIC -shared -o sample_passwd_check.so sample_passwd_check.c -lcrack and enabled with the following in krb5.conf [password_quality] check_library = /path/to/sample_passwd_check.so check_function = check_cracklib (Details found in Kerberos - The Definitive Guide, Jason Garman, O'Reilly, pp 112)
0.6.4-r1 has this. coming to portage in a few minutes.