Authenticating Unix Clients to AD

Has anyone been able to authenticate unix clients to Active Directory? I’d like to consolidate my user management and was hoping that pam_ldap would allow authentication to Active Directory. But from what I hear, AD passwords are only accessible from ADSI? Ideally, unix clients can login using the LDAP directory that AD is built on for authentication.