Using

  <security t="map">
    <cracklib_dict_path>/usr/lib/cracklib_dict_tata</cracklib_dict_path>
    <passwd_use_cracklib>yes</passwd_use_cracklib>
    <pass_min_len>12</pass_min_len>
  </security>

AutoYaST fails to set the dictpath. From the logs:

modules/Pam.rb:87 pam-config for
--cracklib-dictpath=/usr/lib/cracklib_dict_tata returned $["exit":1,
"stderr":"pam-config: invalid option --
----cracklib-dictpath=/usr/lib/cracklib_dict_tata\nTry `pam-config --help' or
`pam-config --usage' for more information.\n", "stdout":""]

The problem is at
https://github.com/yast/yast-security/blob/master/src/modules/Security.rb#L553:

  Pam.Add("--cracklib-dictpath=#{pth}")

should be

  Pam.Add("cracklib-dictpath=#{pth}")

since Pam.Add does add the "--".