password requisite pam_pwquality.so try_first_pass retry=3 type= minlen=8
https://www.cnblogs.com/kevingrace/p/9670160.html