Dual Auth in Apache 2.2

I've managed to install mod_auth_ntlm_winbind into my apache build and
all is working fine (on that side) but I'm trying to make it degrade.

So to write it as an example:
User X goes to the site, but he's logged into a machine that has NTLM
credentials passed to the webserver and is accepted and allowed to
view the site

User Y goes to the site, but he doesn't have NTML credentials (logging
on from a phone, pda, computer that's not joined to the domain) and is
allowed to view the site without entering a user/password.

My httpd config is set as:

Alias /auth "/var/www/auth/"
<Directory "/var/www/auth">
AuthName "NTLM Authentication"
NTLMAuth on
NTLMAuthHelper "/usr/bin/ntlm_auth --helper-protocol=squid-2.5-
ntlmssp"
NTLMBasicAuthoritative off
AuthType NTLM
require valid-user

Order deny,allow
Allow from any
</Directory>

I've tried setting "Satsify any", but that drops the REMOTE_USER env
var.

Is there something I'm missing?