My issue was actually the way their HA setup attempted to configure itself with duplicate SPN's - I ended up needing to manually export a key tab with ktpass to

My issue was actually the way their HA setup attempted to configure itself with duplicate SPN's - I ended up needing to manually export a key tab with ktpass to use it instead of getting it via winbind.