Some of our eduroam users have for quite some time been using EAP-TLS on their edge devices Normally this "just works" and I've certainly used it from various european eduroam sites quite happily. A bit closer to home however, today one of our TLS users tried to connect at Leeds and our end generated the following errors. Mon Jul 9 11:17:10 2018 : Auth: (10991893) Login incorrect (eap: rlm_eap (EAP): Aborting! More than 50 roundtrips made in session with state 0x1235fc092001f154): [rw557@york.ac.uk] (from client roaming0.ja.net port 8 cli 8C-F5-A3-31-14-A8) Mon Jul 9 11:17:53 2018 : Auth: (10992567) Login incorrect (eap: rlm_eap (EAP): Aborting! More than 50 roundtrips made in session with state 0xcae72df7f8d32086): [rw557@york.ac.uk] (from client roaming0.ja.net port 8 cli 8C-F5-A3-31-14-A8) Mon Jul 9 11:18:37 2018 : Auth: (10993336) Login incorrect (eap: rlm_eap (EAP): Aborting! More than 50 roundtrips made in session with state 0xaca0155b9e94185b): [rw557@york.ac.uk] (from client roaming0.ja.net port 8 cli 8C-F5-A3-31-14-A8) Don't seem to have any more info (we're running 3.0.17) and as this is the 1st time I've seen this, not sure what to do to reproduce it. Don't really want to run server in debug mode just on the off-chance I might see something. Anything I can put in the config to generate some additional logs if it happens again ? Rgds A