winbind vs ntlm_auth

[3@D4rkn3ss DuMb]

Dear List,

I have a wired 802.1X working setup using the following:
- PEAPoMSCHAPv2 + Mac verification in MySQL DB for all 802.1X capable
endpoints.
- MAB only for all non 802.1X capable endpoints.

but still, I am confused about  the difference a simple ntlm_auth as an
authentication method used by winbind, and a 'direct' winbind
authentication (from a freeradius point of view)!

My main concern is here:
http://wiki.freeradius.org/guide/Active-Directory-direct-via-winbind

and my setup used
http://wiki.freeradius.org/guide/FreeRADIUS-Active-Directory-Integration-HOWTO


.. Any explanation would really be appreciated :)

thank you,