We've just noticed that when a user authenticates via LDAP, it  ignores characters after the right password. 

For example a user jkc900 has Password Welcome1 

But the user can type in Welcome1111  or Welcome12 etc and still can get into the application. Its just checking the first Welcome1 and they can type anything after that and still can log in.  We've tested at least 50 users and they all have the same issues. Any clues/ solution for this?

Your inputs are highly appreciated.
Jeevan