Thank you for clarifying. I took a look at that data but all I found was one mention of a session timeout. Can you tell me if the NPS server is 1) receiving the authentication request and 2) if it is authorizing the user or denying it at the NPS level?
Given that you are using an external Radius set up, the APs don't perform authentication, they pass the request to the NPS server and take the response of the NPS server (accept or deny) and then we go from there. If the password is failing, it's the NPS server rejecting the password rather than the Aerohive set up. If the authentication request isn't reaching the NPS server however, then we need to investigate where the traffic is dropping. If the logs you've posted are related only to the user in question, that would seem to indicate we are getting the traffic where it needs to go, and the NPS server is denying access.
