yes, but using PAP, passwords are sent as clear-text between radius server and ldap ds and it is unsecure, Is it true?