Local and radius authentication? role based access?

[ajmorris]

Is there a way to setup one local account for guests and then to have other users authenticate via radius or LDAP?  I would like to use the captive portal for our wifi system.  Right now we are evaluating a system from BlueSocket which has a role based login.  Guest only have access to port 80 and other roles have different ports and network shares based on the LDAP query.