Check out this article I found: http://www.debian-administration.org/articles/285
It is pretty much spot-on the money, except that I had to resort to using Auth Basic with a standard htpasswd file.
I am not sure on the details on that yet – it was a proof of concept for a couple of users. Once I have played around with it a little more, I will probably update this document.