Logging ONLY failed authentication and not correct?

Hi two questions. #1 Is there a way to log only incorrect logins in radius.log and to ignore correct logins (so as to not fill up the log file)? #2 When I do get a login incorrect right now I get: Auth: Login incorrect (rlm_chap: Clear text password not available): [username@host.com/<CHAP-Password>] (from client blah.host.com port 2912 cli xxxxxxxxxxx) Is there anyway to get the chap password that the user entered to show up.. or is there no way to do the reverse encryption?