Kerberos for AD Authentication

[Digant Kasundra]

Hello folks,
 
I'm trying to use the kerberos pam module for authenticating a linux machine
against Active Directory.  It works like a charm!  But when someone has an
expired password, it simply says "You must change your password immediately"
but then still lets them login without changing their password.  Is there a
way to make the module force them to change the password?
 
-- DK