hi, you say EAP-TTLS but the logs clearly show PEAP going on - does the windows box have the CA of your signed cert?
PS users file, test Cleartext-Password := "testpassword" alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
