Add an option 'ad domain' similar to 'nt domain'. The latter is prepended to the username, but Active Directoy usernames append the domain part.
This would be useful when authenticating against Netatalk on Solaris in case Solaris bound to Active Directory. Currently users have to type in their full AD name user@domain. Adding an option 'ad domain' would allow users to login giving just their usernames.