Centrify DirectControl on Mac OS X 10.8 and lowerProblem:
The WAN accelerator optimization service on Riverbed Steelhead appliances have been experiencing crashes.
Analysis of network traces and system dumps show that the crashes are related to AD-joined Mac clients.Cause:
All the Mac systems were on OS X 10.8 and sending out SMB2 packets using SMB signing.
However this has not been implemented fully in OS X 10.8.Workaround:
SMB2 can be disabled by adding the following parameter to /etc/centrifydc/centrifydc.conf
After adding the line into the centrifydc.conf
file, save the file and run the following command to reload the configuration:
Alternatively, to push out the configuration automatically using group policy, configure the following GP:
Computer Configuration / Centrify Settings / DirectControl Settings / "Add centrifydc.conf properties"
- Property name: smb.negotiate.smb2
- Property value: false
Once the GP has been set, the Mac will receive the parameter at the next refresh interval.
To force an immediate update, go to the Mac and run the following command:
This is a compatibility issue between Riverbed and OS X.
It was noted that OS X 10.9 Mavericks does support SMB2, and so upgrading OS X to version 10.9 may also resolve the crashes.
Riverbed are also working on resolving this for OS X 10.8 and below.