LDAP with TTLS/PAP will work. What version of FR are you using as there are some fairly big differences with what you need to do. .. especially with 3.x release! :)

Alan