PEAP/802.1x AD authentication for network access working, can AD-LDAP group search work for switch management authorization?

[Joe Vieira]

Hey,
> Before I get neck-deep in testing out configs and debugging, I would
> like to ask if this is a feasible goal.  
yes totally do able.
> If it is, I would appreciate
> any relevant references you know of so that I may start researching
> the proper configuration changes needed to achieve this.  
the rlm_ldap docs should be most of what you need...

> In addition,
> I'd like to know if anyone out there has this kind of configuration in
> place, and working.
I have it working, I do authorization based on openLDAP ( with groups ) 
and i do authentication off active directories.

Joe Vieira
UNIX Systems Administrator
Clark University - ITS