I just upgraded to 4.0.1 and began experiencing the following problem.
Using IE5 (I can't duplicate the problem using Netscape), I log into the e-smith manager. I then go to one of my password protected ibay (e.g. xyz). If I then try to go back to the e-smith manager, I am prompted for my admin password again (the dialog box already has "admin" in the User Name field). When I enter the password, nothing happens (i.e. the Enter Password dialog box remains on the screen). If I then clear the User Name field, re-enter "admin" and then put inthe password, I can access the e-smith manager. However, every time I try to go to a new page on the manager, the Password dialog box pops up again. If I close IE and then open it back up again, these problems cease (at least until I try logging into an ibay again). When I check the httpd error log, there are a number of "...user xyz not allowed access".
I orginally assumed this was just another IE bug (I normally only use Netscape). However, I could not duplicate this problem on another e-smith system which I had not yet upgrade to 4.0.1.
Since more and more clients only have IE installed, it may be something worth looking into.
Noah