Your only other option is to proxy the authentication to NPS on a Windows server. Using LDAP for PEAP authentication is not possible Regards Max -----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+max.caines=wlv.ac.uk@lists.freeradius.org] On Behalf Of Agent Smith via Freeradius-Users Sent: 14 April 2016 15:48 To: freeradius-users@lists.freeradius.org Subject: MSCHAP2 PEAP +Win2012AD _ LDAP + FR Before I spend time researching/configuring this (like I did several years ago, failed and joined the FR box to AD), I would love it if someone can tell me if this is doable now, some pointers on HOW would be great too if it is. I have a need to put together a freeradius box that can authenticate wireless users using MSCHAPv2 PEAP. I do not want to join the Linux box running FR to AD domain, I simply want to use LDAP and authenticate wireless users, the LDAP is really windows AD runing on server 2012. so is this a support config or must I join the FR Linux box to MS AD environment for this to work? Thanks, - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html