Might be another bug:
If you choose a MSN password with many letters (I think it might be more than 16) openfire cannot login anymore and states wrong password. Logging in directy to MSN works, so it’s not the password itself, make it shorter and it starts working (Numbers, uppercase, lowercase, no special chars). Maybe DB field to small? Haven’t done any research where it breaks.