disable password reset prompt at login for expired password
 

Environment:
Red Hat Enterprise Linux Server release 6.9 (Santiago)
LDAP provided by Oracle Directory Server running on Solaris

How do I turn off the automatic change password prompt when a user logs in with an expired password? I want the login to fail with a message that the password is expired.
It would be nice to add a message to contact our help desk also.

Currently when a user's password is found to have expired the system runs a password reset program but that does not work on our system because of our LDAP server.

I have tried changing chpass_provider = none in the sssd.conf file [domain] section. But that did not work for me.

Any pointers greatly appreciated.

Peace,
Lois