pam.adclient.down.mesg

This configuration parameter specifies the message displayed during password change if user is a local UNIX user that's mapped to an Active Directory account, and the Centrify agent (adclient) is not accessible.

For example:

pam.adclient.down.mesg: (Unable to reach Active Directory - using local account)

In most cases, you set this configuration parameter by selecting Enabled and specifying the message to be displayed.