> No.  Messages in the past few days have said you can't get passwords
>from AD.  It's impossible.

>  You have to use ntlm_auth.  See radiusd.conf

>  Alan DeKok.

This still doesn't make any since.  I have ntlm_auth enable, and it is working fine autheniticating our vpn users using ms-chap.