LDAP: Disallow bind with empty password.

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@1986 44740490-163a-0410-bde0-09ae8108e29a

modules/ldap/lib/ConfigHelper.php

@@ -167,6 +167,11 @@ class sspmod_ldap_ConfigHelper {
 		assert('is_string($username)');
 		assert('is_string($password)');
 
+		if (empty($password)) {
+			SimpleSAML_Logger::info($this->location . ': Login with empty password disallowed.');
+			throw new SimpleSAML_Error_Error('WRONGUSERPASS');
+		}
+
 		$ldap = new SimpleSAML_Auth_LDAP($this->hostname, $this->enableTLS, $this->debug, $this->timeout);
 
 		if (!$this->searchEnable) {