The AD integration on Linux is just getting you login. It doesn't support much local configuration of the endpoints, which is the killer feature of AD. I have also found the AD PAM modules to be a bit fragile. I keep having machines that work for awhile, then suddenly need 5 minutes to log in or simply can't log in at all after some time. It has been kind of frustrating for me. I want to tell people "just use your domain login, it will work", but its a lie too often.