[jboss-jira] [JBoss JIRA] Updated: (JBPORTAL-1785) Any LDAP user can login in the Portal with blank password

Any LDAP user can login in the Portal with blank password --------------------------------------------------------- Key: JBPORTAL-1785 URL: http://jira.jboss.com/jira/browse/JBPORTAL-1785 Project: JBoss Portal Issue Type: Bug Security Level: Public(Everyone can see) Components: Portal Identity Affects Versions: 2.6.2 Final Environment: Any (Windows, Linux, MAC OSX) Reporter: Marco Sarti Fix For: 2.6.3 Final I refer to this document: http://wiki.jboss.org/wiki/Wiki.jsp?page=ConfigurePortalForMicrosoftActiv... With portal configured to authenticate users through LDAP/Active Directory, any user can login simply leaving the password field empty. The identity management correctly rejects wrong passwords, but accepts blank password and it completes the authentication process as the password was right.