Dynamic VLANs based on AD group membership

Does anyone have a FreeRADIUS server handing out dynamic VLANs based on group membership in AD to a HP 2800 series switch that's configured for 802.1X? How do I configure FreeRADIUS to "read" the AD group membership attribute, and how do I then pass the matching VLAN-ID back to the switch? Daniel