it took me a little while to find it on O'Reilly's site, but here it is: Apache: The Definitive Guide, 2nd Edition. Chapter 5 regards Authentication.