The user's authentication does not reach the RADIUS server. The flow would be:
1. Locally defined
External Profile (such as RADIUS)
Since the user is defined on both LDAP and RADIUS, LDAP is matched first but since the user is included in the radius group for authentication methods - the connection is dropped.