Konne <bridge_stone@gmx.net> wrote:

is it possible to do EAP-TTLS with LDAP authentication or what is the best and secure way?

It depends on the authentication method inside of EAP-TTLS.

i have an AP cisco aironet 1242, Debian with Freeradius and a W2k3 Server with the Active Directory.

Ugh. Active Directory isn't really an LDAP server. Your choices for the tunneled authentication method are PAP and MS-CHAP. Alan DeKok.