How to configure password complexity on Redhat Linux machines (and its derivatives). After playing with it for a while, I'd call this a best practice because it requires all of the different character classes but doesn't give you bonus points for using any one (i.e., you have to use them all, but they could the same insofar as character scoring is concerned).