I found one more. I had a client rename his domain. I could not find him in a suspended state anywhere.
In SSH
cd /etc/virtual
ls
showed his domain as domain.com_off
I suspendend the account then un-suspended and it cleared the "reading password file" problem