Give user a clue when there is a missing "account" section in the PAM config.

diff --git a/auth/pam.c b/auth/pam.c
index 94e85ea4fe78090b53a012b0593d10424f03b182..f4b1b7649b3b051458e5c08428c34ed207d3a016 100644 (file)
--- a/auth/pam.c
+++ b/auth/pam.c
@@ -139,8 +139,9 @@ pam_verify(pw, prompt, auth)
                        "Password expired, contact your system administrator");
                    return(AUTH_FATAL);
                case PAM_ACCT_EXPIRED:
-                   log_error(NO_EXIT|NO_MAIL,
-                       "Account expired, contact your system administrator");
+                   log_error(NO_EXIT|NO_MAIL, "%s %s",
+                       "Account expired or PAM config lacks an \"account\"",
+                       "section for sudo, contact your system administrator");
                    return(AUTH_FATAL);
            }
            /* FALLTHROUGH */