A user should be notified (at his/her mailaddress) that he/she has to change the password "in x days".
*** This bug has been marked as a duplicate of bug 38594 ***