grace logins on solaris

[Chip Christian]

Now that do_pam_account() returns 1 when pam_acct_mgmt() returns 
PAM_NEW_AUTH_TOK_REQD, the message *is* properly displayed.
So sorry to make you add the NEW_AUTHTOK_MSG crud.  

The patch does work fine, of course.

djm at mindrot.org said:
> That's a step in the right direction, sure.  I'll test, but I assume
> when 
> grace logins are exhausted, pam_acct_mgmt returns something else.
> 
> Can this string (found from a -d invocation) also be displayed in this
> case?
> 
> 	debug: Adding PAM message: \
> 	Your password has expired and you have 4 grace login(s).
> 
> At some point I might find the free time to craft up the code for the 
> other case...

> Hmmm, that message should have been displayed.

> Can you try this patch: