PAM Account Checking with encrypted passwords

[Andrew Bartlett]

Is there a reason that the PAM account modules are not checked for
encrypted passwords?  I run a system where it is important that accounts
really expire, but samba still allows access to these accounts.  (I
currently use 2.0.6)
It seems simple enough - add a few lines to check the account module and
return false if it fails.  Is there a reason it hasn't already been
implemented?   Is it implemented in TNG or 2.0.7?

Any advice/assistance is much appreciated

-- 
Andrew Bartlett
abartlet at pcug.org.au