You can use pam with a pam_krb5 module to authenticate users to AD.
Alternately, there is a perfectly good rlm_krb5 in FreeRADIUS.