Well, even if I follow that guide it says to do a lot of things like as follows:

"Create a file raddb/modules/ntlm_auth, and put the following text in it:

        exec ntlm_auth {
                wait = yes
                program = "/path/to/ntlm_auth --request-nt-key --domain=MYDOMAIN --username=%{mschap:User-Name} --password=%{User-Password}"
        }"

"You will also have to list ntlm_auth in the authenticate sections of each the raddb/sites-enabled/default file, and of the raddb/sites-enabled/inner-tunnel file"

> Date: Sat, 26 Mar 2011 13:51:51 +0000
> From: A.L.M.Buxey@lboro.ac.uk
> To: freeradius-users@lists.freeradius.org
> Subject: Re: configuring freeradius to use Ntlm_auth
>
> hi,
>
>
> if you take the default FreeRADIUS 2.x config and just follow that active directory
> guide, then it just works - you dont need to use exec ntlm_auth or
> anything...just configure the mschap module (which has an ntlm_auth line to be configured)
>
> alan
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html