* LDAP auth - do not permit empty passwords