From 0a113461d7afe84b25e1c662a3f327b330a394ff Mon Sep 17 00:00:00 2001
From: alena <alena@cloud.com>
Date: Mon, 19 Sep 2011 10:51:02 -0700
Subject: [PATCH] bug 11480: verify account/user state when do single signon
 verification status 11480: resolved fixed

Reviewed-by: kelven@cloud.com
---
 server/src/com/cloud/server/ManagementServerImpl.java | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/server/src/com/cloud/server/ManagementServerImpl.java b/server/src/com/cloud/server/ManagementServerImpl.java
index 09384fbefdc..e273090ee3a 100755
--- a/server/src/com/cloud/server/ManagementServerImpl.java
+++ b/server/src/com/cloud/server/ManagementServerImpl.java
@@ -510,6 +510,13 @@ public class ManagementServerImpl implements ManagementServer {
             }
             return null;
         }
+        
+        if (!userAccount.getState().equalsIgnoreCase(Account.State.enabled.toString()) || !userAccount.getAccountState().equalsIgnoreCase(Account.State.enabled.toString())) {
+            if (s_logger.isInfoEnabled()) {
+                s_logger.info("User " + username + " in domain id=" + domainId + " is disabled/locked (or account is disabled/locked)");
+            }
+            throw new CloudAuthenticationException("User " + username + " in domain id=" + domainId + " is disabled/locked (or account is disabled/locked)");
+        }
 
         return userAccount;
     }