Red Hat / Fedora :: SSH With ADS Authentication?

Here is the scenario that I�m facing.I have setup a RHEL5 machine with smb, winbind and krb with ads as the security model. Joined the RHEL machine to the domain.I�m able to see users on the active directory and also able to log-in using SSH which automatically creates a home directory for me (using oddjobd).Two things that I�m trying to achieve are:1.Only users from a certain group on the AD should be allowed to ssh into the RHEL machine.2.Once they ssh in, they should not be able to go to any other directory other than their