best practice for combination freeradius -- active directory?

[Alan DeKok]

"ho" <nospam at berwicke.de> wrote:
> - has anybody implemented a similar system?

  Yes.

> - what could be a alternative/better way to make a connection between
> freeradius and the AD-Servers only for password-authentication?

  ntlm_auth.  See "radiusd.conf"

> - I've heard from our AD-God's ;-) that kerberos is used in the =
> AD-system and that it could be a way?

  If you're doing MS-CHAP or wireless, no.

  Alan DeKok.