4a40e4e8b6
LDAP proxy users stored in local DB with a well-known default password can be exploited by directly authenticating with the LDAP_ prefix. Reject any login attempt where the username starts with the LDAP prefix (case-insensitive) to ensure LDAP users always authenticate via LDAP. Fixes #14862