I’ve tried to accomplish this with both 10.6 and 10.7. I’ve even tried augmented user records and I have figured it out. Currently, we run a 10.6 VPN cluster for a client with radius authenticating back to the Windows radius implementation and then authenticating based on a user group. I’ve spent a lot of time trying to have it authenticate via kerberos, but radius seems to be the only option.
Anyone have any luck with 10.6/10.7 and augmented user records and/or active directory user records with the VPN service?