Name: RADIUS authentication (mandatory mode)
Default: no
Priority: 576

Auth-Type: Primary
Auth-Initial:
    [default=ignore success=end perm_denied=bad auth_err=bad] pam_radius_auth.so
Auth:
    [default=ignore success=end perm_denied=bad auth_err=bad] pam_radius_auth.so use_first_pass

Account-Type: Primary
Account:
    [default=ignore success=1] pam_succeed_if.so user notingroup radius quiet
    [default=ignore new_authtok_reqd=done success=end perm_denied=bad auth_err=bad] pam_radius_auth.so

Session-Type: Additional
Session:
    [default=ignore success=1] pam_succeed_if.so user notingroup radius quiet
    [default=ignore success=ok perm_denied=bad auth_err=bad] pam_radius_auth.so