pam.account.expired.mesg
This configuration parameter specifies the message displayed if a user attempting to log on is denied access because the user’s account has expired.
For example:
pam.account.expired.mesg: Account cannot be accessed at this time. Please contact your system administrator.