Edit 3: Turns out the new version of samba has reversed the defaults on ntml/lanman authentication. Turning them back on on my DCs and FreeRADIUS member server and everything started working again... Thank you for your help, Tim