The Auth_remoteuser extension is not mentioned in this article, but appears to be required for AD authentication to work.