comware 5 failed dot1x authentication, but passed on radius server

[dmk408]

Trying to implement dot1x on Comware switches with clearpass.  I can see the dot1x authentication pass in clearpass radius, but the laptop supupplicant and Switch authenticator says failed.  I previously I was getting dot1x fails in the logs now I don't even get that.  Anyone have this problem? 

#
interface GigabitEthernet1/0/2
port link-mode bridge
description win10-dot1x
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 121 301
port trunk pvid vlan 121
loopback-detection enable
loopback-detection action shutdown
dot1x max-user 5
undo dot1x handshake
dot1x mandatory-domain xyz.com
dot1x
dot1x attempts max-fail 5
#