winbind and kerberos authentication

[jan]

First of all, I apologize if I post to the wrong list. I managed to
get rid of .k5login with the help of auth_to_local and pam_krb5. The
only hassle is that, users who are not in the default domain would
have to type domain\username at FQDN server name in order to login via
SSH. Can the system itself capable of automatically searching which
domain a particular user belongs to via DC? The users don't have to
specify the domain this way...

Many thanks.
Jan