The error is:
# passwd user1
Current Kerberos password:
This user1 is a local user not an AD or remote user, so why this happens...
Check if Kerberos is enabled, if is, "disable"
This is done on Linux Debian 8.6
Now the password can be changed via command line using shell