i know ros can authenticate using radius -- available feature in win 2008 server r2 domain.

can routeros authenticate using ldap nativly, without using radius? and can we setup routes, rules,etc, based on user/group membership, or whatever else is stored in ad?

thanks.

It would be possible by having FreeRADIUS read information from AD LDAP. But in most situations, you can do whatever you need with AD RADIUS.