Active Directory authentication question

[Roberto Carna]

Dear, I have several Windows 7 clients over WiFi autheticating throug
EAP-TLS to a Freeradius 2.1 service against a local MySQL database, it
works OK.

Now I have to change the authentication from MySQL to a remote Active
Directory on a Windows 2012 server.

Because I don't know so much about Windows world, I need to know if I
have to use NTLM, LDAP or Kerberos in order to authenticate against
the remote AD.

Thanks a lot !!!

Roberto