It is unlikely, based upon provided information that you are encountering a bug.
If your radius server returns an access reject, then look to the radius server for the solution. Why is the radius server returning an access-reject? What is it rejecting it for? username/password invalid, missing attribute or incorrect value in a particular attribute?
Again, analyzing the radius server logs would be a good starting point here.
Best of luck,
Jeff