Depending on your configuration you might be able to address the problem with group permission rather than user permission, i.e. having both the radius user and whatever pam needs be members of the same group. -- John