From de390805f1aead57994e13bf8e00486cd9f9e0a7 Mon Sep 17 00:00:00 2001
From: Riccardo Pizzi <pizzi@proxy.leopardus.com>
Date: Sat, 7 Feb 2015 16:18:05 -0500
Subject: [PATCH] added Failed Login auditing

---
 src/audit_plugin.cc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/audit_plugin.cc b/src/audit_plugin.cc
index 021cc9c..22c4f59 100644
--- a/src/audit_plugin.cc
+++ b/src/audit_plugin.cc
@@ -224,7 +224,7 @@ static void audit(ThdSesData *pThdData)
   if (record_logins_enable) {
       const char * cmd = pThdData->getCmdName();
       const char * user = pThdData->getUserName();
-      if (!strcasecmp(cmd, "Connect") || !strcasecmp(cmd, "Quit")) {
+      if (!strcasecmp(cmd, "Connect") || !strcasecmp(cmd, "Quit") || !strcasecmp(cmd, "Failed Login")) {
          if(user && strlen( user))
          	Audit_handler::log_audit_all(pThdData);    
          return;