password requisite pam_pwquality.so try_first_pass minclass=3 minlen=8 lcredit=0 ucredit=0 dcredit=0 ocredit=0 reject_username gecoscheck retry=3 enforce_for_root
password required pam_pwhistory.so remember=5 use_authtok enforce_for_root
password [success=1 default=ignore] pam_unix.so use_authtok nullok sha512
password requisite pam_deny.so
password required pam_permit.so
