I have another samba server and upgraded it to samba4. testparm returns clean with the old config (ROLE_DOMAIN_PDC) and starts up fine. smbclient seems to work fine.
The next thing now is to try and make it a domain member so it can auth against AD.
Thanks, Andrew, I appreciate the pointers.