it is all a matter of what script you feed to auth-user-pass-verify
http://serverfault.com/questions/99861/openvpn-with-active-directory-integration/101137#101137
seems to talk about it
do you need radius specifically? or are you just trying to auth to the active directory?