Record Failed Passwords

[Damien Miller]

On Tue, 20 Jul 2010, Dan Kaminsky wrote:

> Alan,
> 
>    The plaintext password is received from the wire as a null terminated
> string in auth2-passwd.c:userauth_passwd (without privsep) or
> Monitor.c:mm_answer_authpasswd (with privsep).  If authenticated returns
> false, then syslog passwd.  That should work!

All roads lead to auth-passwd.c:auth_password()

-d