Whenever PAM notifies a user about a soon expiring password, the UI fails badly in being intuitive and users wonder what to do.
What happens is:
Login: ...
Password: ...
Then...
Log In
(Nothing else).
You can then use enter to proceed with login. No button offerered ("Continue login...") or the possibility to change the password.
This needs more love!