AuthComponent has a property for setting additional conditions in the same way as it is called $ userScope.
Just include this line in the preFilter () Auth settings block:
$this->Auth->userScope = array('User.active' => true);
Note: the above applies to Cake 1.x. To use 2.x:
$this->Auth->scope = array('User.active' =>true);
Then you can leave your login blank, and AuthComponent will add this additional condition when authenticating the visitor.
Here you can see all the additional properties: http://book.cakephp.org/2.0/en/core-libraries/components/authentication.html#configuring-authentication-handlers
If you do not include this additional area, then inactive users will still be able to log in, and after checking you will have to display them in your login () method.
Jamie
source share