RSA secur-id, PAM and ldap combined

[Richard I Curtis]

In our windows estate, we have RSA securID tied in with AD so we login with our AD-username, and our RSA token + pin.

I am looking at integrating the RSA-SecureID PAM module for authenticating users via their token code, but is there any way to achieve the same as Windows where the user does not exist locally (only in AD), so the lookup for UID, home dir, gid, and shell come from AD but the actual authentication comes from the RSA-SecureID PAM module?