boneyard, Is that vlan 40 the vlan for your controller-ip? I was in the office and tested by removing the vlan in the VAP and my client got an ip.
The vlan it got the ip was from my controller-ip vlan....either that or it was the first in the list of a 'show ip interface brief'.
You're right though, I should not have gotten an ip address.
Vlan default: 3, Assigned: 0, Current: 3 vlan-how: 0 DP assigned vlan:0