All users are able to logon with wrong password or without password for LDAP