In previous versions of GroupWise I enjoyed a feature that prevented login via WebAccess unless a GroupWise password (separate from eDirectory password) was set. Now running 2012 on Linux I was surprised to discover that it is now possible to login via WebAccess with a blank GroupWise password.

Is this a new "feature", a bug, or a configuration issue? If the latter, where might I find the configuration option.