Ran into an "interesting" problem this week with the ASPNetActiveDirectoryMembershipProvider configuration.  In the connection string you'll usually see:

LDAP://server:port

The important thing to note is that the "LDAP" MUST BE CAPITALIZED.  A transmission protocol that is case sensitive?  Way to go, Microsoft.

Hountowa okashii ne.