From 507034c5be77c7894e2eee8afc2ce4ea84002674 Mon Sep 17 00:00:00 2001
From: sebres <serg.brester@sebres.de>
Date: Mon, 24 Apr 2017 15:32:44 +0200
Subject: [PATCH] filter.d/apache-auth.conf: joined some similar expressions

---
 config/filter.d/apache-auth.conf | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/config/filter.d/apache-auth.conf b/config/filter.d/apache-auth.conf
index e22a49b7..d9a6fa5e 100644
--- a/config/filter.d/apache-auth.conf
+++ b/config/filter.d/apache-auth.conf
@@ -14,10 +14,8 @@ prefregex = ^%(_apache_error_client)s (?:AH\d+: )?<F-CONTENT>.+</F-CONTENT>$
 # auth_type = ((?:Digest|Basic): )?
 auth_type = ([A-Z]\w+: )?
 
-failregex = ^client denied by server configuration\b
-            ^user <F-USER>(?:\S*|.*?)</F-USER> auth(?:oriz|entic)ation failure\b
-            ^user <F-USER>(?:\S*|.*?)</F-USER> not found\b
-            ^client used wrong authentication scheme\b
+failregex = ^client (?:denied by server configuration|used wrong authentication scheme)\b
+            ^user <F-USER>(?:\S*|.*?)</F-USER> (?:auth(?:oriz|entic)ation failure|not found|denied by provider)\b
             ^Authorization of user <F-USER>(?:\S*|.*?)</F-USER> to access .*? failed\b
             ^%(auth_type)suser <F-USER>(?:\S*|.*?)</F-USER>: password mismatch\b
             ^%(auth_type)suser `<F-USER>(?:[^']*|.*?)</F-USER>' in realm `.+' (not found|denied by provider)\b