Hi,
I believe you are experiencing a double-hop problem, where SSH server can act on behalf on authenticated user on the machine, where it is running, but cannot forward user's credentials to the remote server (cluster's headnode in this case). It might
be possible to solve this by configuring domain controller and/or ssh server to work with delegation of authentication.
Could you provide some more information about SSH server implementation, its version and configuration and which authentication method is being used?
Regards,
Łukasz