diff --git a/addons/users_ldap/users_ldap.py b/addons/users_ldap/users_ldap.py
index e4fec6a391f..14d985e5f92 100644
--- a/addons/users_ldap/users_ldap.py
+++ b/addons/users_ldap/users_ldap.py
@@ -66,6 +66,11 @@ res_company()
 class users(osv.osv):
     _inherit = "res.users"
     def login(self, db, login, password):
+
+        if not password:
+            # empty passwords are disallowed for obvious security reasons
+            return False
+
         ret = super(users,self).login(db, login, password)
         if ret:
             return ret