2012/6/18 Alan DeKok <aland@deployingradius.com>

  Change the supplicant to use EAP-GTC.  That might work.

 Otherwise, it's impossible.


Thanks,
just found this: http://fuhry.us/blog/2012/01/01/mschapv2-against-mit-kerberos-yes-you-can/
but that requires to patch kerberos which probably I won't be allowed to do.
 
Regards
--
Adrian