> So it looks like the radius client is not sending the password to radius > server if the user does not exist in local machine.
Yes, that's how PAM works. It can't authenticate users that don't exist locally (think about it - if user/group is not defined locally what will user be able to access on the machine). Nothing to do with radius. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html