s4:auth_sam: allow logons with an empty domain name