use /var/log for SASL