samba - May 2016 - Problems authenticating after upgrade to sernet-samba 4.3.9-24

Hello list,

Just did a major Samba/CTDB upgrade and our previously working auth setup is
having some issues under the new version.  Would appreciate some help
troubleshooting.  It seems like we are close, since the trust relationship
between our Samba servers and the AD service looks OK.  But winbind fails like
this:

------
[root at mako-nsd4 ~]# wbinfo -n jsmith
failed to call wbcLookupName: WBC_ERR_DOMAIN_NOT_FOUND
Could not lookup name jsmith
------

However, this all seems OK to my (inexperienced) eye:

------
[root at mako-nsd4 samba]# wbinfo -t
checking the trust secret for domain MYEDU via RPC calls succeeded

[root at mako-nsd4 samba]# net ads testjoin
Join is OK

[root at mako-nsd4 samba]# net ads info
LDAP server: 10.1.134.140
LDAP server name: DC-1.ds.myedu.edu
Realm: DS.MYEDU.EDU
Bind Path: dc=DS,dc=MYEDU,dc=EDU
LDAP port: 389
Server time: Sat, 14 May 2016 08:40:08 PDT
KDC server: 10.1.134.140
Server time offset: 1

[root at mako-nsd4 samba]# net ads status -U binduser
Enter binduser's password:
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
objectClass: computer
cn: mako-smb
distinguishedName: CN=mako-smb,OU=DORS,OU=Organizational
Units,DC=ds,DC=myedu,DC=edu
instanceType: 4
whenCreated: 20140301124836.0Z
whenChanged: 20160514132223.0Z
uSNCreated: 33907960
uSNChanged: 323590553
name: mako-smb
objectGUID: 309e69a1-d25a-410f-9cee-78bd2fd58d6c
userAccountControl: 69632
badPwdCount: 0
codePage: 0
countryCode: 0
badPasswordTime: 131076665555482243
lastLogoff: 0
lastLogon: 131077139965468714
localPolicyFlags: 0
pwdLastSet: 131077057335760624
primaryGroupID: 515
objectSid: S-1-5-21-1326408308-1533351006-945835055-575907
accountExpires: 9223372036854775807
logonCount: 14035
sAMAccountName: MAKO-SMB$
sAMAccountType: 805306369
dNSHostName: mako-smb.its.myedu.edu
servicePrincipalName: HOST/mako-smb.its.myedu.edu
servicePrincipalName: HOST/MAKO-SMB
objectCategory:
CN=Computer,CN=Schema,CN=Configuration,DC=ds-root,DC=myedu,DC=edu
isCriticalSystemObject: FALSE
dSCorePropagationData: 20150512120659.0Z
dSCorePropagationData: 20150415145152.0Z
dSCorePropagationData: 20150122231825.0Z
dSCorePropagationData: 20141022223538.0Z
dSCorePropagationData: 16010714223649.0Z
lastLogonTimestamp: 131074480766899362
------


Thanks for any pointers.

Jarrod Smith