Login page, there would be 3 valid scenarios -
1) valid Login
2) Invalid Login
3) Negative Testing scenario
system is expected to prompt the user with an error message.
But a negative testing scenario would be where you are trying to break the application.
For Instance,
1) leaving Password blank,
2) trying to navigate using the URL,
3) using the forward button of the IE bypassing the Login page etc.....