Hi there - hope someone can help!
We're using the ActiveDirectoryMembershipProvider to authenticate users to AD, via Forms auth. This works fine for all accounts, except those with no password set (e.g. a blank string). Having turned off the required field validation on the Login control, the control now fires the LoginError event, and we see "Membership credential verification failed" events in the event log. However, stepping through the code doesn't reveal any clues.
The user account is OK - we have a web service which happily authenticates the same user (IIS basic auth, over SSL). It feels like the MembershipProvider isn't dealing with blank passwords correctly, but no idea what to try next...
Any ideas?
Chris
...
Go to the complete details ...