AD Group based ldap auth

[Dourty, Brian R. (IATS)]

I'm trying to get group based authentication working using LDAP against
AD. Right now I'm getting a failure related to the group search filter.
What filter should I be using?

groupmembership_filter =
"(|(&(objectClass=group)(member=%{Ldap-UserDn}))(&(objectClass=top)(uniq
uemember=%{Ldap-UserDn})))"

Looking at the howto here
http://lists.cistron.nl/pipermail/freeradius-users/2005-November/048536.
html got me part of the way. Anyone out there doing group based auth
against AD mind sharing their config?

Thanks,

Brian Dourty
System Administrator - Team Lead
IAT Services
University of Missouri - Columbia
573-882-1035