Don't permit login if password is expiring

[emilio.penna]

I'm using IdP v3 with OpenLDAP, and configured it for issue a warning in 
login page when password is expiring (it's working ok).

The problem: the "expiring password" message is shown to users with a 
link to the change password page, but most of them don't change their 
password, the grace logins are consumed and when they can't login 
(because of expired password) they call to helpdesk complaining...


Is there a way to block login if password is expiring?


I'm using a entry in ClassifiedMessageMap for expiring password control 
in password-authn-config.xml

<entry key="ExpiringPassword">
     <list>
         <value>ACCOUNT_WARNING</value>
     </list>
</entry>



Thanks in advance
Emilio