I solved my problem by not using encoded passwords - now everything is working as expected... this will work during development, but won't be an option when we deploy. It appears that my version of Acegi has a bug concerning encoded passwords (see my previous post for details).
------------------------------------------------------- This SF.Net email sponsored by Black Hat Briefings & Training. Attend Black Hat Briefings & Training, Las Vegas July 24-29 - digital self defense, top technical experts, no vendor pitches, unmatched networking opportunities. Visit www.blackhat.com _______________________________________________ Acegisecurity-developer mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer