Prime Infra AAA authentication sequence

[MATS KARLSSON]

I know i can have a authentication for the users to Prime on an external Radius with fallback to local, if something fails.

That is how we have it today and ordinary users have OneTimePassword for login.

But I now want an API user account to be authenticated locally.

Is it in someway possible to have local authentication as first option and if that fails or no username exist have Radius as next,

to have Radius as a fallback to Local?

Today this API user account fails at radius login and get success on Local with the drawback it generates a lot of logs in Radius about failed logins. It works fine for the API user, but is not popular among those handling the radius.

[superego]

There's no option to fallback to RADIUS when Local is chosen:

Only when RADIUS is chosen then there's an open to fallback to Local.

To avoid RADIUS logs being flooded with failed attempts, can you create a service account in AD instead to be used for API?