ApacheCon EU 2014

When HTTP 1.0 came out, it supported Basic Authentication. Since then, the majority of authentication operations moved to applications and frameworks, using internal datastores. As they were getting more popular, external authentication services like LDAP needed to be added to the application code or to framework's set of methods.
Introducing three Apache httpd modules that hope to simplify the application logic by moving the authentication, access control, and identity operations back to the Apache httpd, with application consuming the result of these operations: mod_authnz_pam for access control, mod_intercept_form_submit for PAM operations using application's native logon form submission, and mod_lookup_identity that can deliver user attributes and group membership from servers like FreeIPA via sssd and dbus.