Just figured it out.

In eap.conf under the peap section 'use_tunneled_reply = yes' needs to be set there as well.  I only had it set under the ttls section before.  I just tested a client and its working fine now.


Thanks for all your help Mikkal!