ENH: further tighten lighttpd basic auth regex

11 years ago · b8e7d0b867
parent a7ebb84a7d
commit b8e7d0b867
1 changed files with 1 additions and 1 deletions
--- a/config/filter.d/lighttpd-auth.conf
+++ b/config/filter.d/lighttpd-auth.conf
@ -9,7 +9,7 @@
 # Notes.:  regex to match wrong passwords as notified by lighttpd's auth Module
 # Values:  TEXT
 #
-failregex = ^: \(http_auth\.c\.\d+\) (password doesn\'t match|digest: auth failed for .*: wrong password|get_password failed).*, IP: <HOST>\s*$
+failregex = ^: \(http_auth\.c\.\d+\) (password doesn\'t match .* username: .*|digest: auth failed for .*: wrong password|get_password failed), IP: <HOST>\s*$

 # Option:  ignoreregex
 # Notes.:  regex to ignore. If this regex matches, the line is ignored.