pam.account.disabled.mesg

This configuration parameter specifies the message displayed if a user attempting to log on is denied access because the user’s account has been disabled in Access Manager or Active Directory Users and Computers.

For example:

pam.account.disabled.mesg: Account cannot be accessed at this time. Please contact your system administrator.