I'd add the other pam module, pam_krb5, as referenced by other articles, such as Authenticating Redhat 7.3 against the Active Directory and POP/IMAP via Active Directory/Kerberos

If you choose one of these let us know how it works out.