Details
-
Improvement
-
Resolution: Done
-
Trivial - P5
-
None
-
Fully Compatible
Description
This could cause some really weird behavior to authenticate without a username in place. Also blank passwords get encrypted which also makes it difficult to detect that the password is blank. I would like to see blank fields in .addUser be rejected outright.
Attachments
Issue Links
- is related to
-
SERVER-3095 Need to specify a minimum password length
-
- Closed
-