Appeared to be an issue with sssd. I applied latest sssd rpm's and this corrected my issue.

On Wed, Dec 24, 2014 at 2:02 AM, John Trump <trumpjk@gmail.com> wrote:
When I create a new user the passwordexpirationtime is set to 197001000000Z which means the user should be forced to change their password upon logging in. However, the user can log in and is not prompted to change password. Any suggestion on why this setting is being ignored? Box is checked indicating user must change password upon reset.

Thanks,
John