Local user cannot able to change password

HI

i have issue with centos system were i cannot able to change local users password.

Code:[user1@SERVER1 ~]$ passwd
Changing password for user user1.
Changing password for user1.
(current) UNIX password:
passwd: Authentication token manipulation error
and the same time/var/log/secure is printing below message

Code:Sep 1 10:38:22 SERVER1 unix_chkpwd[40690]: check pass; user unknown
Sep 1 10:38:32 SERVER1 unix_chkpwd[42164]: check pass; user unknown
Sep 1 10:38:32 SERVER1 unix_chkpwd[42164]: password check failed for user (user1)
Sep 1 10:38:32 SERVER1 passwd: pam_unix(passwd:chauthtok): authentication failure; logname= uid=1030 euid=1030 tty=pts/1 ruser= rhost= user=user1

system-auth file:

Code:auth required pam_env.so
auth required pam_tally2.so deny=3
auth sufficient pam_unix.so nullok try_first_pass
auth requisite pam_succeed_if.so uid >= 500 quiet
auth required pam_deny.so

account required pam_unix.so
account sufficient pam_localuser.so
account sufficient pam_succeed_if.so uid < 500 quiet
account required pam_permit.so
account required pam_tally2.so

password requisite pam_cracklib.so try_first_pass retry=3 difok=0 ocredit=-0 dcredit=-1 ucredit=-1 lcredit=-1 minlen=10 maxrepeat=3
password sufficient pam_unix.so sha512 shadow nullok try_first_pass use_authtok remember=12
password required pam_deny.so

session optional pam_keyinit.so revoke
session required pam_limits.so
session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
session required pam_unix.so

password-auth file:

Code:auth required pam_env.so
auth required pam_tally2.so deny=3
auth sufficient pam_unix.so nullok try_first_pass
auth requisite pam_succeed_if.so uid >= 500 quiet
auth required pam_deny.so

account required pam_unix.so
account sufficient pam_localuser.so
account sufficient pam_succeed_if.so uid < 500 quiet
account required pam_permit.so
account required pam_tally2.so

password requisite pam_cracklib.so try_first_pass retry=3 difok=0 ocredit=-0 dcredit=-1 ucredit=-1 lcredit=-1 minlen=10 maxrepeat=3
password sufficient pam_unix.so sha512 shadow nullok try_first_pass use_authtok remember=12
password required pam_deny.so

session optional pam_keyinit.so revoke
session required pam_limits.so
session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
session required pam_unix.so
please help me to fix this

regards,

Ben