do a search for proxy authenication, I know there is something there for that, also you could use dansgaurdian follow Ray's howto and you can allow users based on the proxy authentication contrib, I haven't tried it my self but I think people here got it working
hope that helps
cheers