This article describes a small situation where users try to login the SRX on root using SSH while the device has a RADIUS authentication server.

• Any other user account and RADIUS account logs in.
• Root password not working.
• Logging in via SSH.
• Logs show RADIUS rejecting the authentication to root.

Make sure to check the "system services ssh" configuration and have root-login allowed

#set system services ssh root-login allow

If the authentication order includes RADIUS or TACACS+ servers, but the servers reject the request, the handling of the request is more complicated.

• If password (local password authentication) is included at the end of the authentication order and the remote authentication servers reject the authentication request, the device attempts local password authentication.
• If password (local password authentication) is not included in the authentication order and the remote authentication servers reject the authentication request, the request ends with the rejection.