So not just FR update but also the OS updated too...so possible eg samba upgrade too

If the RPM blatted your config like that then it may also have done something to your EAP config too - eg certificates (especially if the debug shows the clients failing at that point) . Did your windows client have correct/secure EAP settings or was it just 'user/password don't care about cert details' mode?

alan
--
Sent from my Android device with K-9 Mail. Please excuse my brevity.