Hello I am using FreeRADIUS 2.1.9-3 on CentOS 6.0. I am sending all syslog output to a remote rsyslog server (and have local1.* assigned to RADIUS in rsyslogd.conf). I want to log only auth failures, not successful logins. Is there an easy way to do this? I don't want to use a SQL backing store for this project since that is what is holding the syslog data on the remote machine anyway. 'auth = yes' logs everything, 'auth = no' logs nothing, and I don't want to see/store the good/bad passwords, so 'auth_badpass' and 'auth_goodpass' aren't an option. I'm sure I'm not the only person who has wanted to do this, but I can't find anything on the freeradius-users list. Any help? Thanks. Ian Ehrenwald, Linux Systems Administrator TripAdvisor, LLC, 141 Needham St, Newton, MA 02464 978-328-7816 (mobile) / 617-795-7716 (desk) iehrenwald@tripadvisor.com / (Sent from my MacBook Pro)