Is there any other ways to authenticate against Active Directory with FreeRADIUS?

is it possible to authenticate using Kerberos instead of ntlm or ms-chap. Maybe EAP-TLS.