You can use the krb5 module in FR so long as the client sends the password and doesn't do challenge response. In this case it means you'd be looking at EAP-TTLS/PAP as the EAP method. alan