Quick update, this is weird. It still wouldn't work after correcting the host file, so I had one of my AD guys come to take a look. We changed the LDAP path to a dfferent AD server and the port to 3268. Rebooted, and it worked! Wow, that felt good. After that I decided I wanted to install the collaboration components, so I went through setup again, verified the information and...ldad/domain auth to BAS stopped working.

Seriously buggy software imo.