pam.allow.password.expired.access.mesg

This configuration parameter specifies the message displayed when users are not permitted to log on with an expired password because the pam.allow.password.expired.access parameter is set to false.

For example:

pam.allow.password.expired.access.mesg: Password expired - access denied