In some cases, MembershipUser.ResetPassword() raises an exception. This only happens for some users, and it's not clear why. There are no inputs to the method, so it seems like a problem internal to Oracle's membership provider implementation.
The exception text: The provider returned an error that is not described by other MembershipCreateStatus enumeration values.
at Oracle.Web.Security.OracleMembershipProvider.ResetPassword(String username, String passwordAnswer) at System.Web.Security.MembershipUser.ResetPassword(String passwordAnswer) at System.Web.Security.MembershipUser.ResetPassword()
I don't know why the behavior may be occurring, but to get more information you might want to enable ODP.NET tracing to see if there is any more information there. I suspect an error may have occurred in the odp.net level (or lower) and the aspnet provider wasn't expecting to have to handle that so is failing to return a proper MembershipCreateStatus enumeration.
You'll need to restart the app after enabling tracing (and to stop tracing after setting level back to 0). You'll want to try to trace ONLY the problem operation if possible to keep things manageable. It wouldnt hurt to enable SQLNET tracing as well while you're at it.