Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >
article

KB-4023: SMB2 packets sent from Mac systems causing Riverbed WAN accelerators to crash

Centrify DirectControl ,   Centrify Identity Service, Mac Edition ,  

12 April,16 at 11:07 AM

Applies to: Centrify DirectControl on Mac OS X 10.8 and lower

Problem:

The WAN accelerator optimization service on Riverbed Steelhead appliances have been experiencing crashes. 
Analysis of network traces and system dumps show that the crashes are related to AD-joined Mac clients.


Cause:

All the Mac systems were on OS X 10.8 and sending out SMB2 packets using SMB signing.
However this has not been implemented fully in OS X 10.8.


Workaround:

SMB2 can be disabled by adding the following parameter to /etc/centrifydc/centrifydc.conf:
 
smb.negotiate.smb2: false

After adding the line into the centrifydc.conf file, save the file and run the following command to reload the configuration:
 
sudo adreload


Alternatively, to push out the configuration automatically using group policy, configure the following GP:
 
Computer Configuration / Centrify Settings / DirectControl Settings / "Add centrifydc.conf properties" 
  • Property name: smb.negotiate.smb2 
  • Property value: false 

Once the GP has been set, the Mac will receive the parameter at the next refresh interval.
To force an immediate update, go to the Mac and run the following command:
 
adgpupdate


Resolution:

This is a compatibility issue between Riverbed and OS X.

It was noted that OS X 10.9 Mavericks does support SMB2, and so upgrading OS X to version 10.9 may also resolve the crashes.

Riverbed are also working on resolving this for OS X 10.8 and below.

Still have questions? Click here to log a technical support case, or collaborate with your peers in Centrify's Online Community.