X-Git-Url: https://git.argeo.org/?a=blobdiff_plain;f=org.argeo.util%2Fsrc%2Forg%2Fargeo%2Fosgi%2Fuseradmin%2FDirectoryUserAdmin.java;h=003aad11d8e1e6ea6e3ab9212b3c38db061755e9;hb=f3ea14abccc33b1c3326417a87c91145be776c72;hp=ac076167e02bb2983a266db60716eb942b5b467d;hpb=4d675e1c871cfd8e4481e03cd496ab975b8b367d;p=lgpl%2Fargeo-commons.git

diff --git a/org.argeo.util/src/org/argeo/osgi/useradmin/DirectoryUserAdmin.java b/org.argeo.util/src/org/argeo/osgi/useradmin/DirectoryUserAdmin.java
index ac076167e..003aad11d 100644
--- a/org.argeo.util/src/org/argeo/osgi/useradmin/DirectoryUserAdmin.java
+++ b/org.argeo.util/src/org/argeo/osgi/useradmin/DirectoryUserAdmin.java
@@ -23,7 +23,6 @@ import javax.naming.directory.BasicAttributes;
 import javax.naming.ldap.LdapName;
 import javax.naming.ldap.Rdn;
 import javax.security.auth.Subject;
-import javax.security.auth.kerberos.KerberosKey;
 import javax.security.auth.kerberos.KerberosTicket;
 
 import org.argeo.util.CurrentSubject;
@@ -292,8 +291,10 @@ public class DirectoryUserAdmin extends AbstractLdapDirectory implements UserAdm
 
 			Subject currentSubject = CurrentSubject.current();
 			if (currentSubject != null //
+					&& getRealm().isPresent() //
 					&& !currentSubject.getPrivateCredentials(Authorization.class).isEmpty() //
-					&& !currentSubject.getPrivateCredentials(KerberosTicket.class).isEmpty()) {
+					&& !currentSubject.getPrivateCredentials(KerberosTicket.class).isEmpty()) //
+			{
 				// TODO not only Kerberos but also bind scope with kept password ?
 				Authorization auth = currentSubject.getPrivateCredentials(Authorization.class).iterator().next();
 				// bind with authenticating user