general question

[Norbert Wegener]

I know, that every single of the requirements described below is 
possible with freeradius.
The question is, whether all fits together in  a single authentication 
process:
- do an 802.1x authentication using certificates
- extract the username (here:  a machine name in the form 
host/26tef001.tde002.mydomain.net)
 from the certificate  and query AD, whether the associated account is valid
proceed, if okay, else reject user.
-if valid, take that username host/... and ask a mysql database which 
vlan that client shall get assigned and assign the vlan.
Thanks
Norbert Wegener