I am sure that LFD (Login Failure Daemon) checks Apache's error log for failed HTTP authentication attempts ie. log entries like:
[Mon Feb 25 10:12:45 2013] [error] [client 10.0.0.1] user FAKEUSER not found: /index.html [Mon Feb 25 10:11:56 2013] [error] [client 10.0.0.1] user REALUSER: authentication failure for "/index.html": Password Mismatch
All the attempts above are failed HTTP Basic logins. The following one is failed HTTP Digest auth from the same error_log
[Mon Feb 25 10:10:37 2013] [error] [client 10.0.0.1] Digest: user 'FAKEUSER' in realm 'REALM' not found: index.html
Am I right in thinking that this would suggest that LFD does not check for failed HTTP Digest logins? And if so if there an easy way to add such "validation" pattern to the script?
Any suggestion would be much appreciated!