Re: freeradius security

I mean in this connections using PAP, user-password is clear-txt. (using chap makes ldap server not to use encryption passwords in DS therefore I want to use PAP). isn't it unsecure?