I am having trouble the username tags in logformat and error templates. The logformat documentation says that %ul is the username from authentication, but in my experience when there is an authentication failure this is filled with whatever the user tried to authenticate with instead of being empty, is this intended? On the other hand, %ue is only filled when the user has been authenticated, which is what I want. However it seems I am out of luck with custom errors substitutions, there is no equivalent to the %ue from logformat. %a is replaced by the username even when authentication failed, just like %ul in logformat. I need to distinguish quickly (from the error screen as opposed to the logs) between authentication and authorization (acl) failures. BTW I am aware of the %m and %o tags, I am still looking for the %ue tag behavior. Thanks.
