If RSA SecurID is used for authentication error messages differes for invalid username.
vulners.com/securityvulns/securityvulns:doc:7891