Active directory authenication via PAM in RedHat AS3

[shane stixrud org]

I am to the point where my AS3 server is a member server in our 
active directory domain (winbind + kerberos has been confirmed working). 

I am stumped as to what is the minimum PAM configuring required for 
system wide authentication via winbind. My understanding is that 
adding auth and account statements for the pam_winbind module into the 
/etc/pam.d/system-auth file should be sufficient? 

When attempting to login to the server with an active directory account, I 
receive the following error:

Oct 24 14:37:55 ns4 sshd[4062]: Illegal user AD+spgsrs from 127.0.0.1
Oct 24 14:38:00 ns4 sshd[4062]: Failed password for illegal user AD+spgsrs 
from 127.0.0.1 port 33004 ssh2

Am I missing something simple? :)

-- 
"People position you as the nemesis to Bill Gates. He started Microsoft and 
you started Linux, the big competition to Microsoft's dominance of operating 
systems. Is that an unfair or inaccurate characterization?" --New York Times

"Really, I'm not out to destroy Microsoft. That will just be a completely 
unintentional side effect. --Linus" 
                                                                              --