--- a/util/sasl/plain.lua	Thu Dec 03 19:18:18 2009 +0000
+++ b/util/sasl/plain.lua	Thu Dec 03 21:57:47 2009 +0100
@@ -24,7 +24,7 @@
 		return "failure", "malformed-request";
 	end
 
-	local authorization, authentication, password = s_match(message, "^([^%z]+)%z([^%z]+)%z([^%z]+)");
+	local authorization, authentication, password = s_match(message, "^([^%z]*)%z([^%z]+)%z([^%z]+)");
 
 	if not authorization then
 		return "failure", "malformed-request";