How to configure RADIUS +LDAP using SASL/Certificate based binding instead of usernames and passwords

[Arran Cudbard-Bell]

> There are other ways to establish the trust between radiusd and LDAP beside simple binds which do not involve passwords. All of these use SASL in some form. Unfortunately rlm_ldap does not support them. I know Alan rewrote rlm_ldap recently for the upcoming 3.0 version,
> I don't know if SASL support was added or not. In any event this is an open source project and if you want this functionality then the usual mantra "Patches Welcome" applies.

No it wasn't.

-Arran