At the top of ipsilon/login/authform.py, there's a mapping to translate PAM error messages to more understandable messages. However, users still get the "Authentication token is no longer valid; new one required" message when their password is expired.
ipsilon/login/authform.py
Log in to comment on this ticket.