The --disable-shared fixed that problem, and I replaced all the certificates and I was successfully able to logon via TLS, and low and behold. PEAP works now too.
Thanks. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html