> rlm_eap_peap: Session established. Decoding tunneled attributes. > rlm_eap_peap: Received EAP-TLV response. > rlm_eap_peap: Had sent TLV failure. User was rejected earlier in > this session. Read the *whole* debug output; somewhere further up will be the reason the user was rejected.