I have noticed a comment in the configuration file: # Whether to enable the authentication method?s session control (i.e., PAM). # That requires more resources on the server, and makes cookies one-time-use; # thus don?t enable unless you need it. That should be used when you have an # accounting system in place with the PAM modules. It seems ocserv may probablly support PAM based accounting system, but I can not found any instructions or mannal about how to make it.