On 11/08/2012 06:45 PM, Jordan Dohms wrote: > EAP-MSCHAPV2: Invalid authenticator response in success request This suggests the problem isn't certs, since you're inside the PEAP tunnel at this point. Check that samba/winbind are working ok, patched to the same level, etc. - it looks like the "well" known "mangling mschap response" issue.