Alan,
Hi,
EAP doesnt like the user-name being played around with....ensure that you 'nostrip'
> [eap] Identity does not match User-Name, setting from EAP Identity.
in your proxy.conf for the realm you are handling....or use 'stripped-user-name'
for the checks/handlers.
alan