Criteria criteria = new Criteria();
criteria.addEqualTo("user.name", userName);
criteria.addEqualTo("user.enabled",true);
criteria.addEqualTo("type", PasswordCredential.TYPE_CURRENT);
criteria.addEqualTo("domainId", securityDomain);
Query query = QueryFactory.newQuery(PasswordCredentialImpl.class,criteria);
PasswordCredentialImpl pwc = (PasswordCredentialImpl)getPersistenceBrokerTemplate().getObjectByQuery(query);
if (pwc != null)
{
// store the userName by hand as the user is configured as auto-retrieve="false"
pwc.setUserName(userName);