user and passwd should be empty