Running Xfree86-3.1.2, and xdm compiled for shadow password support.
Using a username on my machine with an 'expired' password, xdm merrily
allows the login. However, sitting at the same machine, and instead
using a virt. console to login, expiration is properly observed by the
shadow login program, and I get a 'Your password is inactive...' error.
'Bug'? or 'Feature' ? ;-)