> ldap > if (notfound) { > linelog > } > > ? > > Matthew Ok and where i should type in that? As I know linelog have to be in " Post-Auth-Type REJECT{}" to log reject messages Best Regards, Paul