I've tested this patch on 0.4 and it seems to work sufficiently okay. The edge cases aren't covered such as:

• If the auth succeeds but the user doesn't exist, the error is not graceful.
• It may be that someone wants the user to get created in the case of a user not existing in the INTERNAL_DATABASE.

Otherwise its a great start. Thanks Romain :-).

settings.yaml:

---
    :login: true
    :authorize_login_delegation: true

Sample apache config:

<VirtualHost *:80>
    ServerName foreman1.vm
    ServerAdmin ken@bob.sh
    DocumentRoot /usr/share/foreman/public
    Railsautodetect on

<Location />
    AuthType Basic
    AuthName "Restricted Files" 
    AuthUserFile /etc/httpd/auth.pwd
    Require Valid-User
    </Location>
    </VirtualHost>