On Apr 16, 2012, at 11:51 AM, pessimist wrote:

Found Auth-Type = CHAP
+- entering group CHAP {...}
[chap] login attempt by "ABC" with CHAP password
[chap] Using clear text password "123" for user ABC authentication.
[chap] Password check failed
++[chap] returns reject
Failed to authenticate the user.
Using Post-Auth-Type Reject
+- entering group REJECT {...}
[attr_filter.access_reject]  expand: %{User-Name} -> ABC
attr_filter: Matched entry DEFAULT at line 11
++[attr_filter.access_reject] returns updated
Delaying reject of request 0 for 1 seconds

greetings,

your output looks similar to mine. I recently setup a bunch of mac computers using 802.1x with hp/3com switches. 
try connecting with flat file username and password, bypass sql for now. verify radius works at with md5/leap, else set switch to eap and pass tickets.
-j