I have a comment/question on draft-ietf-secsh-auth-kbdinteract-05.txt:
In the example section, the draft says:
"The second example is of a standard password authentication, in this case the user's password is expired."
What does this mean? What about this case indicates that the user's password is expired?