How to set password policy for specific user or group in RHEL using PAM configuration

Question

How to set password policy for specific user or group in RHEL using PAM configuration?

I changed my "/etc/pam.d/system-auth" file as below but still I am not able to set easy

password for user "dkumar" with group "dkumar"
password [success=1 default=ignore] pam_succeed_if.so user ingroup dkumar
password sufficient pam_cracklib.so try_first_pass retry=3 minlen=1
password sufficient pam_unix.so sha512 shadow nullok try_first_pass use_authtok
password required pam_deny.so

Answer 1

I would advice to use FreeIPA. It's very flexible and will match to your demands.