Re: EAP-TLS OK - EAP-PEAP KO!! why that?

rlm_eap_peap: Session established. Decoding tunneled attributes. rlm_eap_peap: Received EAP-TLV response. rlm_eap_peap: Had sent TLV failure. User was rejected earlier in this session.

Read the *whole* debug output; somewhere further up will be the reason the user was rejected.