Name: RADIUS authentication
Default: no
Priority: 257
Auth-Type: Primary
Auth:
    [default=ignore success=ignore] pam_succeed_if.so user ingroup aaa quiet
    [authinfo_unavail=ignore success=end default=ignore] pam_radius_auth.so

Account-Type: Primary
Account:
    [default=ignore success=ignore] pam_succeed_if.so user ingroup aaa quiet
    [authinfo_unavail=ignore success=end perm_denied=bad default=ignore] pam_radius_auth.so

Session-Type: Additional
Session:
    [default=ignore success=ignore] pam_succeed_if.so user ingroup aaa quiet
    [authinfo_unavail=ignore success=ok default=ignore] pam_radius_auth.so