problem with pam.deny.so

Hallo, I've been struggling with hardening my pam.d stacks lately. Upon replacing pam.unix.so by a stack containing account.so, auth.so, session.so, warn.so and deny.so, the login shell starts returning messages like 'user account expired', even for my root account. I've been fiddling with /e

problem with pam.deny.so

Hallo, I've been struggling with hardening my pam.d stacks lately. Upon replacing pam.unix.so by a stack containing account.so, auth.so, session.so, warn.so and deny.so, the login shell starts returning messages like 'user account expired', even for my root account. I've been fiddling with /et