Re: Combining EAP, MSCHAP and LDAP

Best bet is to use your LDAP directory for authorisation, and your AD server for authentication. There are quite a few guides on setting up AD with FreeRADIUS.

The LDAP module supports an 'access' attribute, and will allow you to do group lookups.

Thanks, I never thought of splitting the two functions between the two systems. I will give that a go, but may be posting again if I'm stuck! Dave