jbossas/jboss-as — pull request #4038 by darranl (2013-02-08 15:24:51+00:00)
Title: [AS7-6108] Fix to disable incorrectly allowing empty passwords when authenticating against LDAP.  

By default disable the acceptance of empty passwords from remote users attempting to authenticate.

Also added a new option 'allow-empty-passwords' on the LDAP authentication definition so that users that do have a valid use for empty passwords can reverse the change.