I've found DropBox's zxcvbn system to be ideal. Instead of requiring passwords to fit a set of arcane rules, it requires passwords to meet a threshold of entropy.

Is there a reason this isn't more widespread?

https://blogs.dropbox.com/tech/2012/04/zxcvbn-realistic-pass...