https://blog.csdn.net/weixin_43034477/article/details/82177687
这个帖子很好

[root@scaqad02adm01 pam.d]# passwd grid
Changing password for user grid.
passwd: Authentication token manipulation error

这是因为由于直接注释掉了/etc/pam.d/system-auth 里面的这两行

#password    required    pam_pwquality.so minlen=8 minclass=4 dcredit=-1 ucredit=-1 lcredit=-1 ocredit=-1 difok=8 maxrepeat=3 maxclassrepeat=4 local_users_only retry=3 authtok_type=
#password    sufficient    pam_unix.so try_first_pass use_authtok sha512 shadow remember=10

这两行不能直接注释，这两行需要修改成下面这样

/etc/pam.d/system-auth

#password    required    pam_pwquality.so minlen=8 minclass=4 dcredit=-1 ucredit=-1 lcredit=-1 ocredit=-1 difok=8 maxrepeat=3 maxclassrepeat=4 local_users_only retry=3 authtok_type=
#password    sufficient    pam_unix.so try_first_pass use_authtok sha512 shadow remember=10
password    required    pam_pwquality.so
password    sufficient    pam_unix.so