authenticate Cisco devices against AD via Freeradius

Hi all, i currently use my radius server (3.0.11) to do things such EAP-TTLS, MSCHAPv2, CHAP in order to authenticate different users on devices/machines/etc... I managed to configure a virtual router for doing PAP against local USERS (in users file) following a guide about IOS+Freeradius. Works perfectly. What i'd like to do now is to authenticate users from the Cisco IOS device against AD (via ldap, mschap or whatever). The device i'm using only support PAP. The radius server is joined to the AD domain, getent passwd retrives all the AD users. Is it possible? (i know, i have a lot of imagination :-)) thanks -- "Madness, like small fish, runs in hosts, in vast numbers of instances." Nessuno mi pettina bene come il vento.