return value of pam_sm_authenticate()

[SRIDHAR BANDI <bandis@india.hp.com>]

hi ,

What should pam_sm_authenticate() ( PAM Kerberos ) return when the
password of the user is expired , should we return PAM_NEW_AUTHTOK_REQD
or PAM_SUCCESS . Please can someone help me in this.

thanks so much in advance for helping me out.
regards
bandi