I am very interested in this as well,
I am trying to get a Project done where we have DNN as our main Portal site and an web application site. The  App site has it’s own user database (actually it is somewhat tied into our Internal Service Application).
What we want to do is… once a night or so… grab the users from a certain security group in DNN, un-DES the passwords, Find the corresponding user in the APP Database,  replace what-ever password is there with what we nabbed from DNN so the Customer only has to  remember one password…
Simple, Right?  We have the Machine ID, we have the Hashed Password, We have the Salt…. (aspnet_Membership, aspnet_Users, Web.config)
What are my developers missing. (I don’t code, I don’t even play a developer on TV…)
I heard something like this “may” work
objSecurity.Decrypt(Common.Globals.HostSettings("EncryptionKey").ToString, strPropertyValue)
where strPropertyValue is the password

I also heard that DNN uses DES with a 16 byte key and “It should be easy to even get an outside app and feed it the Salts and Hashes”
Why has it been SOOO hard for my Dev’s to get this working correctly, I know it can be done because of the “Opps, I forgot my password button”  Is it just time to get some new developers or is it really that tough to code?

Thanks!

-Gj-