PEAP authentication + LDAP attribute recovery