Global User Blacklist

Hello folks, I am trying to devise the best way to configure a global blacklist in freeradius. In the current configuration, I am handling a number of different authentication types with various virtual servers. For PEAP, I have integrated active directory, and for the other services, I use LDAP. Since LDAP makes group checking very easy, I was hoping that I could leverage that for my blacklisting needs. So, my question is: Is it possible to do LDAP group checking in post-auth of the default server even if the request is EAP? Cheers, Dave