I came across this question and have some knowledge about it. Basically, MS AD means mschap or mschapv2, as you stand NO chance to retrieve user-password from MS AD, I checked its objectclass and schema, User-Password is write-only. :). So unless your network devices support mschap/eap-peap-mschapv2.etc, you cannot use it. On Thu, 2018-12-06 at 12:06 -0800,... wrote: ...... --