}
SyncopeUser user = (SyncopeUser) attributable;
final String password = user.getPassword();
final List<String> passwordHistory = user.getPasswordHistory();
if (user.verifyPasswordHistory(user.getClearPassword(), pspec.getHistoryLength())) {
passwordPolicy.getWordsNotPermitted().add(user.getClearPassword());
} else {
if (pspec.getHistoryLength() > 0 && password != null) {
passwordHistory.add(password);
}