Deal with inactive or frozen account #204

Activity

1. mitfik commented on Mar 12, 2014

   

   mitfik

   on Mar 12, 2014

   More actions

   It depends on what exactly are you asking for.
   If you are asking about authenticators, if they can deal with additional conditions then it is up to that particular authenticator.
   For example in ldap authenticator you have that possibility to define filter like: filter: (active=yes) which will check additional if the field active is set to yes.

   If you are asking about sending proper error message (no matter what authenticator you will use) to the user that the credential are good but your account is not active then no, CAS do not have support for that.
2. mitfik

   added

   feature

   on Mar 12, 2014
3. mitfik

   added this to the rubycas 2.0 milestone on Mar 12, 2014
4. shenhf commented on Mar 13, 2014

   

   shenhf

   on Mar 13, 2014

   Author

   More actions

   Finally I hacked casserver/lib/casserver/authenticators/sql_bcrypt.rb, hard coded matching_users method. It stopped inactive user login, as you said, not sending proper error message.