Univention Bugzilla – Dependency tree for Bug 51903
UCS user authentication takes place after the "PW expired" check