From f73132e226088841556850d061638524cef7cbfd Mon Sep 17 00:00:00 2001
From: keegan <swfanboy01@gmail.com>
Date: Tue, 21 Nov 2017 19:19:24 -0500
Subject: [PATCH] Stop LDAP Auth from succeeding without password

---
 src/plugins/auth/ldap.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/plugins/auth/ldap.js b/src/plugins/auth/ldap.js
index ad3846bc..8f3239fd 100644
--- a/src/plugins/auth/ldap.js
+++ b/src/plugins/auth/ldap.js
@@ -23,7 +23,7 @@ function ldapAuthCommon(user, bindDN, password, callback) {
 }
 
 function simpleLdapAuth(user, password, callback) {
-	if (!user) {
+	if (!user || !password) {
 		return callback(false);
 	}
 
@@ -41,7 +41,7 @@ function simpleLdapAuth(user, password, callback) {
  * LDAP auth using initial DN search (see config comment for ldap.searchDN)
  */
 function advancedLdapAuth(user, password, callback) {
-	if (!user) {
+	if (!user || !password) {
 		return callback(false);
 	}