Fix Kerberos login issue: user can login even account is disabled

zanata · Jan 17, 2013 · 6a579fa · 6a579fa
1 parent d303546
commit 6a579fa
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/zanata-war/src/main/java/org/zanata/security/AuthenticationManager.java b/zanata-war/src/main/java/org/zanata/security/AuthenticationManager.java
@@ -160,7 +160,7 @@ public void kerberosLogin()
       {
          SpNegoIdentity spNegoIdentity = (SpNegoIdentity) Component.getInstance(SpNegoIdentity.class, ScopeType.SESSION);
          spNegoIdentity.authenticate();
-         if (!isNewUser() && !isAuthenticatedAccountWaitingForActivation())
+         if (!isNewUser() && !isAuthenticatedAccountWaitingForActivation() && isAccountEnabledAndActivated())
          {
             spNegoIdentity.login();
             this.onLoginCompleted(AuthenticationType.KERBEROS);