pam.allow.password.change.mesg

This configuration parameter specifies the message displayed when users are not permitted to change their expired password because the pam.allow.password.change parameter is set to false.

For example:

pam.allow.password.change.mesg: Password change not permitted