...
When a user attempts to login into the system, the local user database is always consulted first.
If a corresponding account is found, the user is logged in to the system.If the account is not found in the local DB and if authentication method of that account is used to check the password.
For locally authenticated accounts, the password is simply checked against the local user database.
If the password is correct, user is logged in.
If Radius is enabled, a Radius Access Request is performed.
If Radius responds with an Access Accept message, the user is logged in to the system.
If the Radius client in Unimus is not enabled, authentication for this user fails.
Access accounting
After a successful login, an accounting record is always created in the local database.
Even Radius-based logins are accounted in the local DB.
...
An accounting record in the local DB is always created, so this mechanism does not compromise the auditability of the system access.