OS X Password Changes vs. Keychain

I have Macs that are boudn to our domain using active directory. When a user password expires within AD, the users are notified on their Mac login screen to change their password - all expected, no issues.

Can anyone confirm whether the default or login keychain is updated to reflect the user password change? Does the keychain password always remain unchanged and retains the first password that was registered against it?