NT authentication from web page

Is it possible to create a service in an NT4.0 IIS server located in a DMZ such that a servlet running in the IIS machine can query an internet web user for a login/password and then use a DLL to have the service authenticate that user against a PDCon the other side of the firewall? I’m not sure if the DMZ machine is a member of the PDC’s domain, but that could probably be arranged if it doesn’t create a security hole. Other potential solutions welcomed. Solution can be homebrew or 3rd party.