allow null passwd (from serge@arpa)