likewise works well with ad groups, first verify that likewise is operational and joined to domain and logging in from an ad account - then if that works try implementing restrictions, verify syntax carefully
Everything is configured correctly etc.
I am further investigating the sshd_config.
I just tested the following:
It looks like this works oke. It looks like the domain name must be in capital letters.