Normally, a NULL password in the SQL table matches any submitted password. If you disable this option, NULL passwords does not match any submitted password, causing every authentication request for that user to be rejected.

NullPasswordMatchesAny does not have any effect if one or more AuthColumnDefs are defined.