Well, /etc/login.defs belongs to package pwdutils. So if there is backward incompatible change in this file, then pwdutils must handle it!!! What if user doesn't have yast2-security installed? then it won't work?