1.4-rolling /sbin/radius_shell: Permission denied

Using 1.4-rolling-202212310809 with a radius server for authentication doesn’t seem to work. Submitting valid radius login credentials results in display of the login banner, followed by “/sbin/radius_shell: Permission denied” and logout. The radius server sends the “Cisco-AVPair shell:priv-lvl=15” attributes as per docs. Invalid login credentials fail as expected. Local user accounts work. Is there anything else I should look at or try?

Edit: Logins fail via ssh, but console worked.

A bug report is submitted for this:

https://phabricator.vyos.net/T4943

Thanks! Coopercentral’s write-up in the bug report is definitely clearer than my brief description.