RE: ntlm_auth & ldap authorize questions

I set up a testing environment with an virtual Windows Server 2008 R2 server with Active Directory Role and a virtual freeradius server (v2.1.12). For the authentication I use ntlm_auth (followed instructions on http://deployingradius.com/documents/configuration/active_directory.html) which works great. I understand that I cannot authorize using ntlm_auth so I want to set up the ldap module for authorization, e.g. perform checks on group memberships.

I (sort of) solved exactly the same problem. I will post my solution in "MSSCHAP auth + LDAP authorizaton" shortly. Stay tuned. A.