[Bug 1357471] Re: Samba4 AD DC randomly dies, error: "Did not manage to negotiate mandetory feature SIGN for dcerpc auth_level 6".

[Thiago Martins]

Guys,

It is impossible to use Samba 4.1.6 from Ubuntu 14.04.1 as an AD DC in
production.

This is happening all the time:

http://i.imgur.com/wDqOsy6.png

I think that if you restart any Domain Controller, it will trigger this
error on others DCs. Because I just restart my PDC (ubuntu-ad-1) and all
BDCs dies.

I just build an Ubuntu PPA Archive to provide Samba 4.1.11 for Trusty:
http://launchpad.net/~martinx/+archive/ubuntu/ig - I'll test it today.

Ubuntu needs a much, far much more serious Q.A. Team.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to samba in Ubuntu.
https://bugs.launchpad.net/bugs/1357471

Title:
  Samba4 AD DC randomly dies, error: "Did not manage to negotiate
  mandetory feature SIGN for dcerpc auth_level 6".

Status in “samba” package in Ubuntu:
  New

Bug description:
  Hello!

  I'm using Samba4 AD DC, from Ubuntu 14.04.1, it works almost
  flawlessly but, almost everyday, it dies.

  The error log begins to show:

  "Did not manage to negotiate mandetory feature SIGN for dcerpc
  auth_level 6"

  Then, the replication stops working, the domain stops responding and
  Windows guests do not authenticate, it becomes really messy.

  Here is the workaround:

  ---
  rm /var/log/samba/* ; service samba-ad-dc restart
  ---

  More info:

  https://lists.samba.org/archive/samba/2014-May/181193.html

  Issue: "samba" process uses excessive CPU time and generates high IO Wait. log.samba has many entries stating "Did not manage to negotiate mandetory feature SIGN for dcerpc":
  http://ghanima.net/doku.php?id=wiki:ghanima:healthandsecurity:samba4

  Thanks!
  Thiago

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1357471/+subscriptions