Hi,
> User01 is only EAP-TLS
> User02 is only EAP-TTLS
> Uesr03 is only EAP-PEAP
> Uesr04 is Any EAP-Type
Just an educated guess ... in users file,
User01 EAP-Type != EAP-TLS, Auth-Type := Reject
User02 EAP-Type != EAP-TTLS, Auth-Type := Reject
...
but, that is not a backend mysql :(