I've tried to update to latest version, 2:3.6.6-6+deb7u10, but as previous version after some hours/days all client refuse to authenticate users, seems to me because was not able to update the machine account password (so join get invalid).
Also, a note, as stated in subject, testparm say me that 'client ipc signing' is a invalid option, and this sound strange to me, because that option are cited in changelog. Anyway, rolled back to 2:3.6.6-6+deb7u7 (pre-badlock), now all work as expected. Thanks.