In ottemperanza a quanto deciso dalla CCR https://wiki.infn.it/cn/ccr/aai/doc/passwordpolicy è stata creata la policy:

ccr2020

avente le seguenti caratteristiche

$ kadmin.local -q "getpol ccr2020"
Authenticating as principal enrico/admin@INFN.IT with password.
Policy: ccr2020
Maximum password life: 31557600
Minimum password life: 0
Minimum password length: 10
Minimum number of password character classes: 3
Number of old keys kept: 5
Maximum password failures before lockout: 0
Password failure count reset interval: 0 days 00:00:00
Password lockout duration: 0 days 00:00:00

Verrà applicata a tutti i principal kerberos "@INFN.IT" a partire dall'11 gennaio 2021