Hi,
I have a samba 4 AD, running fine but last night detected that during some
minuts something was not ok,,, I have detected that during some minutes in
samba 4 AD server was a high load average and some services were not
working correctly, It seems that this has generated and increment of swap
that is generated by samba process.
Logs and info collected:
Jan 11 04:44:02 server winbindd[25326]: [2017/01/11 04:43:36.043863, 0]
../source3/rpc_server/rpc_ncacn_np.c:990(rpc_pipe_open_external)
Jan 11 04:44:02 server winbindd[25326]: Failed to bind external pipe.
Jan 11 04:44:03 server winbindd[25326]: [2017/01/11 04:44:02.572304, 0]
../source3/winbindd/winbindd_cm.c:1840(wb_open_internal_pipe)
Jan 11 04:44:03 server winbindd[25326]: open_internal_pipe: Could not
connect to lsarpc pipe: NT_STATUS_IO_TIMEOUT
Jan 11 04:44:14 server winbindd[25326]: [2017/01/11 04:44:14.845333, 0]
../source3/winbindd/winbindd_dual.c:107(child_write_response)
Jan 11 04:44:14 server winbindd[25326]: Could not write result
Jan 11 04:44:15 server winbindd[25332]: [2017/01/11 04:44:15.065815, 0]
../source3/winbindd/winbindd_dual.c:107(child_write_response)
Jan 11 04:44:15 server winbindd[25332]: Could not write result
Jan 11 04:44:25 server smbd[25379]: [2017/01/11 04:44:25.333583, 0]
../libcli/smb/smb_signing.c:138(smb_signing_good)
Jan 11 04:44:25 server smbd[25374]: [2017/01/11 04:44:25.292418, 0]
../libcli/smb/smb_signing.c:138(smb_signing_good)
Jan 11 04:44:25 server smbd[25379]: smb_signing_good: BAD SIG: seq 2
Jan 11 04:44:25 server smbd[25374]: smb_signing_good: BAD SIG: seq 2
Jan 11 04:44:25 server smbd[25379]: [2017/01/11 04:44:25.785467, 0]
../source3/smbd/process.c:572(receive_smb_talloc)
Jan 11 04:44:25 server smbd[25374]: [2017/01/11 04:44:25.785473, 0]
../source3/smbd/process.c:572(receive_smb_talloc)
Jan 11 04:44:25 server smbd[25379]: receive_smb: SMB Signature
verification failed on incoming packet!
Jan 11 04:44:25 server smbd[25374]: receive_smb: SMB Signature
verification failed on incoming packet!
Jan 11 04:44:25 server smbd[25380]: [2017/01/11 04:44:25.591664, 0]
../libcli/smb/smb_signing.c:138(smb_signing_good)
Jan 11 04:44:25 server smbd[25380]: smb_signing_good: BAD SIG: seq 2
Jan 11 04:44:25 server smbd[25380]: [2017/01/11 04:44:25.787546, 0]
../source3/smbd/process.c:572(receive_smb_talloc)
Jan 11 04:44:25 server smbd[25380]: receive_smb: SMB Signature
verification failed on incoming packet!
Jan 11 04:44:26 server smbd[25398]: [2017/01/11 04:44:26.222968, 0]
../libcli/smb/smb_signing.c:138(smb_signing_good)
Jan 11 04:44:26 server smbd[25398]: smb_signing_good: BAD SIG: seq 2
Jan 11 04:44:26 server smbd[25398]: [2017/01/11 04:44:26.223067, 0]
../source3/smbd/process.c:572(receive_smb_talloc)
Jan 11 04:44:26 server smbd[25398]: receive_smb: SMB Signature
verification failed on incoming packet!
Jan 11 04:44:26 server smbd[25409]: [2017/01/11 04:44:26.230283, 0]
../libcli/smb/smb_signing.c:138(smb_signing_good)
Jan 11 04:44:26 server smbd[25409]: smb_signing_good: BAD SIG: seq 2
Jan 11 04:44:26 server smbd[25409]: [2017/01/11 04:44:26.230360, 0]
../source3/smbd/process.c:572(receive_smb_talloc)
Jan 11 04:44:26 server smbd[25409]: receive_smb: SMB Signature
verification failed on incoming packet!
root at server:~# ps aux |grep 30686
root 11092 0.0 0.1 12728 2160 pts/0 S+ 08:48 0:00 grep 30686
root 30686 21.2 27.2 1129996 561608 ? R 2016 6446:26
/usr/local/samba/sbin/samba -D
root at server:~# ps aux |grep 30688
root 11105 0.0 0.1 12728 2060 pts/0 S+ 08:48 0:00 grep 30688
root 30688 0.7 18.1 1321680 372960 ? S 2016 221:15
/usr/local/samba/sbin/samba -D
# sar -q
04:25:01 AM 1 134 1.18 1.28 1.12 0
04:35:01 AM 0 135 0.77 1.05 1.12 0
04:45:02 AM 0 135 11.62 13.45 6.75 0
04:55:01 AM 0 133 0.17 2.01 3.66 0
05:05:01 AM 0 134 0.13 0.47 2.04 0
# free -m
total used free shared buffers cached
Mem: 2010 1585 425 18 41 229
-/+ buffers/cache: 1314 695
Swap: 2076 538 1538
What is the problem?
Thanks