But if we were to concentrate on the problem
which is what do you do if you do not have clear-text passwords?????

Is is not possible to create a NT HASH from, for example, a SHA1 encrypted password as used with LDAP.

And as for Funk, they should stick their guns and push TTLS. Who the #*#* needs two eap tunneling protocols that do exactly the same...

Sorry... I am mistaken.... three eap tunneling
protocols... one TTLS and two PEAP (Cisco and MS).

SW2.