Optionally show a Login Form with AuthApache (Patch included)
We are using mod_intercept_form_submit (http://www.adelton.com/apache/mod_intercept_form_submit/) to login via PAM. This allows to use Policies from FreeIPA.
I can use the regular standardform from LemonLDAP::NG, let apache intercept the post and add the REMOTE_USER Header if Login was successful. This should also be possible with mod_auth_form in Apache 2.4. http://httpd.apache.org/docs/current/mod/mod_auth_form.html
I attached a patch, which is essentially a copy of AuthApache, so you can use both versions with Choice at the same time to combine Kerberos with PAM Login via Form.