Is this still being worked on? Radius with PAP or CHAP is not a viable option for us. Cleartext password transmission over the network will not work and storing the passwords in AD using reversible encryption will not work either.
Can you add the ability to use a filter with LDAP authentication? Just using a base DN isn't sufficient for all organizations, being able to use a filter to specify things like being a member of a group would be very helpful.