I use sogo for that. Includes a web interface as well as proper authentication mechanisms and sync integration. Is also lightweight and even allows LDAP integration oif you like.