...different from SRFC), authentication will fail unless valid logon data is provided. It is possible to bypass this initialcall (and therefore the login validation), by opening the connection to the SAP AS specifying the LCHECK=0 parameter...
http://www.cybsec.com/upload/CYBSEC-Whitepaper-Exploiting_SAP_Internals.pdf