The nonquery messages from PAM account call aren't forwarded to user when using privilege separation and the login succeeds. If the pam_acct_mgmt call fails the message is sent to user in the disconnect packet (proto 1) or as banner (proto 2) however it isn't sent at all if the call succeeds, because the loginmsg buffer is cleared in the mm_answer_pam_account call.
Created attachment 938 [details] only send messages from monitor on pam_account account failure This is one way to fix this. There might be a tidier way...
This is the same thing as bug #1087, right?
Of course *** This bug has been marked as a duplicate of 1087 ***
Change all RESOLVED bug to CLOSED with the exception of the ones fixed post-4.4.