Hi, I created a testing environment based on two Raspberry Pi (attached diagram), in my tests it has worked well, following the documentation I changed the configuration filesthe least possible, as I have a file server (Samba) and to maintain compatibility with Windows my Openldap has the userPassword, sambaLMPassword and sambaNTPassword attributes (managed by Smbldap-tools), allowing the operation of PEAP/MSCHAPV2, PEAP/GTC and TTLS/PAP, on high availability I am using Corosync / Pacemaker, it works but this is the best way to do things ? Thansk, Marcos Renato. */etc/freeradius/3.0/mods-available/ldap :* ldap { server = 'rasp4.acme.lab' identity = 'cn=admin,dc=acme,dc=lab' password = password base_dn = 'dc=acme,dc=lab' ... ... ... tls { start_tls = yes ca_file = ${certdir}/cacert.pem require_cert = 'demand' } */etc/freeradius/3.0/mods-available/ldap :* update { control:NT-Password := 'sambaNTPassword' control:LM-Password := 'sambaLMPassword' */etc/freeradius/3.0/clients.conf :* client ap1 { ipaddr = 192.168.0.1 secret = password } */etc/freeradius/3.0/radiusd.conf :* log { auth = yes ... ... ... proxy_requests = no #$INCLUDE proxy.conf diagram.jpg -- Marcos Renato da Silva Junior Universidade Estadual Paulista - Unesp Faculdade de Engenharia de Ilha Solteira - FEIS Departamento de Engenharia Elétrica 15385-000 - Ilha Solteira/SP (18) 3743-1164