From the FreeIPA website (http://freeipa.org):
"...FreeIPA is an integrated security information management solution combining Linux (Fedora), Fedora Directory Server, MIT Kerberos, NTP, DNS. It consists of a web interface and command-line administration tools. Currently it supports identity management with plans to support policy and auditing management..."
The authentication part can be done using apache and kerberos, but it would be nice to get session setting and project permissions from the FreeIPA user's profile. Similar to what the "LdapSessionSettingsPatch" tries to do with ActiveDirectory?.