The following article is an extension to the LDAP/Active Directory with the option to authenticate users belonging to a certain group.
Authentication via Pam LDAP