it works just fine...
- Check, the failing url(s), containing TCP_DENIED in access.log, carefully ,w.r.t http_access rule(s) setup. Make sure there are no conflicts, or cases which are not handled (allowed). - Check the radius server log files, failed and successfull auth. attempts, may provide more insight. M.