How authenticate user in trusted doamin without authenticate user in user's own domain

We have 2 domain D1 and D2, had one way trust let D2 trust D1.

We want to build a web form to let user in D1(D1-user) to authenticate (D1-user) by using D2 domain controller.

And D1-user only can provide user principal name and password to D2

Is NPS server the only way?

Thanks

Below is detail.

1. We have 2 domains. D1 and D2.

2. D2 outgoing trust D1(one way trust)

3. There is a web server in D2 domain(D2-web)

4. D2-web host a web form allow user to input user principal name and password

Can we authenticate users in D1(D1-user) through web form on D2-web? and we can not let D2-web talk to D1 domain controller.