That is exactly what I am looking for, just not limited to webmail but for all (contrib) web applications. If at all possible.....
Then we should seek either a apache auth with this or a way to use it in lemon:ldap. Or both