On 02/28/2013 02:29 PM, Jakub Hrozek wrote: > There was another bug in pam_pwd_expiration warning. If it was set to 0 > which means "always display whatever server sends", the condition > wouldn't hit and effectivelly the option would be set to -1 (=use > provider default). Ack.