Hi,
in trac ticket #751 it was requested to add syslog messages telling the admin why access was denied for a specific user with LDAP access provider.
The following two patches add this for the check based on the shadow expire attribute and the authorized service check.
bye, Sumit