Lets say you want to connect to an LDAP server using your username and password, But its configured in a bad way and has a setting to authorise NULL bind : if NULL values are sent, the LDAP server will proceed to bind the connection. Sooo if we succed in LDAP connection, the backedn will think we are authenticated. What we can do to achieve bind() with 2 null values, We will completly remove these parameters from the query. So not have user