nologin + reason -> logging reason

[@lbutlr]

On Nov 21, 2016, at 2:49 PM, Arkadiusz Miśkiewicz <arekm at maven.pl> wrote:
> On Monday 21 of November 2016, @lbutlr wrote:
>> On Nov 21, 2016, at 7:39 AM, Arkadiusz Miśkiewicz <arekm at maven.pl> wrote:
>>> reason is the only thing in maillog that allows to distinguish why user
>>> was not allowed to log in.
>> 
>> Um… the only thing? How about where you set the reason in the first place?
> 
> That "first" place is constantly changing (database) and I'm looking at logs 
> from X days/weeks ago, so database doesn't even have old info.

I strongly suspect that nologin is the wrong way to do this.