[Bug 1357471] [NEW] Samba4 AD DC randomly dies, error: "Did not manage to negotiate mandetory feature SIGN for dcerpc auth_level 6".

[Thiago Martins]

Public bug reported:

Hello!

I'm using Samba4 AD DC, from Ubuntu 14.04.1, it works almost flawlessly
but, almost everyday, it dies.

The error log begins to show:

"Did not manage to negotiate mandetory feature SIGN for dcerpc
auth_level 6"

Then, the replication stops working, the domain stops responding and
Windows guests do not authenticate, it becomes really messy.

Here is the workaround:

---
rm /var/log/samba/* ; service samba-ad-dc restart
---

More info:

https://lists.samba.org/archive/samba/2014-May/181193.html

Issue: "samba" process uses excessive CPU time and generates high IO Wait. log.samba has many entries stating "Did not manage to negotiate mandetory feature SIGN for dcerpc":
http://ghanima.net/doku.php?id=wiki:ghanima:healthandsecurity:samba4

Thanks!
Thiago

** Affects: samba (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to samba in Ubuntu.
https://bugs.launchpad.net/bugs/1357471

Title:
  Samba4 AD DC randomly dies, error: "Did not manage to negotiate
  mandetory feature SIGN for dcerpc auth_level 6".

Status in “samba” package in Ubuntu:
  New

Bug description:
  Hello!

  I'm using Samba4 AD DC, from Ubuntu 14.04.1, it works almost
  flawlessly but, almost everyday, it dies.

  The error log begins to show:

  "Did not manage to negotiate mandetory feature SIGN for dcerpc
  auth_level 6"

  Then, the replication stops working, the domain stops responding and
  Windows guests do not authenticate, it becomes really messy.

  Here is the workaround:

  ---
  rm /var/log/samba/* ; service samba-ad-dc restart
  ---

  More info:

  https://lists.samba.org/archive/samba/2014-May/181193.html

  Issue: "samba" process uses excessive CPU time and generates high IO Wait. log.samba has many entries stating "Did not manage to negotiate mandetory feature SIGN for dcerpc":
  http://ghanima.net/doku.php?id=wiki:ghanima:healthandsecurity:samba4

  Thanks!
  Thiago

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1357471/+subscriptions