On 17/06/14 14:11, Phil Mayers wrote: > > ...and then a *lot* of talloc debugging. Given the last items in the > debug I'm wondering if it's the saving of cached attributes? Correction: closer examination of the debugging shows it's *restoring* the saved attributes i.e. during an SSL-resumed PEAP re-auth that it's failing.