Couple of things: IIRC the account control flags are checked by the "mschap" module, which I see is running before the LDAP lookup - try moving mschap after LDAP in "authorise"
Second, I can't remember if mschap checks the acct control flags in "authorize" or "authenticate". If the latter you'll need to move away from using LDAP bind for auth -- Sent from my phone with, please excuse brevity and typos
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
