I have another samba server and upgraded it to samba4. testparm returns clean with the old config (ROLE_DOMAIN_PDC) and starts up fine. smbclient seems to work fine. The next thing now is to try and make it a domain member so it can auth against AD. Thanks, Andrew, I appreciate the pointers.