LdapBindPassword

Decides whether a user-supplied password may be sent to an LDAP simple bind.

A zero-length password turns the bind into an unauthenticated bind, which Active Directory and other servers report as a success. A password containing a NUL byte makes ldap_bind() throw a TypeError, which surfaces as a server error and skips the failed-attempt bookkeeping.