certificate requirements for EAP-PEAP using Radius-to-LDAP

[Matt Ashfield]

Hi All

I'm trying to do EAP-PEAP (with MSCHAPv2) radius authentication against an
LDAP database with my passwords stored in clear text on the directory. I'm
thinking my issues right now are with certificates. 

Can someone give me a quick explanation of what certificate requirements I
need to have on my radius server for doing the NAS-radius conversation as
well as the ldap authorization. Also, what certificates do I need for/from
the LDAP server? 

Thanks

Matt
mda at unb.ca