thanks tim:
yes, it is better but yet working correctly:
gahn@giraffe:~:$ ssh bob@192.168.255.138 bob@192.168.255.138's password: Permission denied, please try again. bob@192.168.255.138's password: Permission denied, please try again. bob@192.168.255.138's password: Permission denied (publickey,password,keyboard-interactive).
but trying local username "labrat" is working fine:
...
Sending Access-Accept of id 3 to 192.168.255.138 port 65003 Juniper-Local-User-Name = "labrat" Finished request 5.
The RADIUS server is happy and sent back an Access Accept packet to your Juniper device. Check the logs/debug output for the Juniper device to see why it's not authenticating the user after it has received an Access Accept from the RADIUS server. Tim