Ryan Setiawan H wrote:

...

Please post ALL of the debug output. I suspect that you are doing the ldap lookups OUTSIDE of the TLS tunnel rather than INSIDE. ... repost forgot change subject I'm sorry I didn't include all the debug, because it was so large... anyway here the debug :

As I suspected... you are doing the LDAP lookups *outside* of the tunnel. See raddb/sites-available/inner-tunnel. Ensure that the references to "ldap" are uncommented. Alan DeKok.