I'm going to have to do some research into this as I've never seen it before. Are you getting this error when you try to use Hashed whether it's on a Farm or not? IE: Can it be recreated on a single install?

I'm pretty sure I know where this is happening but fixing it is another matter at this point. There's one part of the code that when a user logs in manually the password they've used is compared to that in the DNN database and updates it if they're different. If you've entered the password wrong then that piece of code isn't going to be hit (you'll already have been kicked out of the login process).

I can reproduce the error on a separate box. I have DNN 4.8.3 stock, with the previous AD provider installed. It has Bring2Mind's Document Exchange trial installed on it, but nothing else. The membership provider was set to Encrypted password storage and PasswordRetrieval = true. I deleted all AD accounts from it, changed it to Hashed and Retrieval = false. I get the same error:

If i turn retrieval on, i get the error that it cant retrieve passwords when using Hashed storage or something to that effect.

AD settings are:

Authentication Type: Delegation

Testing with my AD account, pointing at the root domain of the forest.

Many thanks