diff -ur tags/audit-2.3.2/src/ausearch-parse.c trunk/src/ausearch-parse.c --- tags/audit-2.3.2/src/ausearch-parse.c 2013-07-29 17:36:18.412837824 -0400 +++ trunk/src/ausearch-parse.c 2013-08-01 09:37:48.661798043 -0400 @@ -98,6 +98,7 @@ case AUDIT_PATH: ret = parse_path(n, s); break; + case AUDIT_USER: case AUDIT_FIRST_USER_MSG...AUDIT_LAST_USER_MSG: case AUDIT_FIRST_USER_MSG2...AUDIT_LAST_USER_MSG2: ret = parse_user(n, s);