Security hole - Authenticated login allows login with no password

[GoogleCodeExporter]

What steps will reproduce the problem?
1. Go to OWL login screen
2. Click "Authenticated User" 
2. Enter a user name that is not an authenticated user name
3. Do not enter a password
4. Click login

What is the expected output? What do you see instead?
I would expect to get an error, but instead the user is logged in. 

Please use labels and text to provide additional information.

Original issue reported on code.google.com by nicole.m...@gmail.com on 28 Oct 2012 at 7:41

[GoogleCodeExporter]

Is this logging into a server that also has guest login permitted?

Original comment by bernho...@gmail.com on 29 Oct 2012 at 4:24

[GoogleCodeExporter]

Confirmed that if guest login is disabled, you can not log in without a 
password.

Original comment by nicole.m...@gmail.com on 19 Dec 2012 at 9:39

• Added labels: Priority-Low
• Removed labels: Priority-Medium

[GoogleCodeExporter]

So it is not a security hole, just an usability problem

Original comment by crrami...@gmail.com on 15 Jan 2013 at 2:15