getpwuid(13891) failed Failed to finalize nt token

[Andrew Bartlett]

On Wed, 2022-03-23 at 21:41 +0000, capricorn cap via samba-technical
wrote:
> Hi!
> I have joined  4.5.16-Debian to AD.
> sudo net ads testjoin
> Join is OK
> getent passwd works
> getent group works
> 
> But When I try to browse from windows computer then I get popup to
> enter username and password.
> Below is the log message.
> 
> Kerberos ticket principal name is [xyz at TP.NUTI.LOCAL]
> SID S-1-5-21-774976744-1476728229-930774774-3891 -> getpwuid(13891)
> failed
> Failed to map kerberos pac to server info (NT_STATUS_UNSUCCESSFUL)
> 
> Can anyone help me that what can be the solution to fix this issue.

My guess is that nss_winbindd isn't running, or else there is something
fishy going on with idmap, but either way you are running a very old
version and should run a supported version.

Andrew Bartlett
-- 
Andrew Bartlett (he/him)       https://samba.org/~abartlet/
Samba Team Member (since 2001) https://samba.org
Samba Team Lead, Catalyst IT   https://catalyst.net.nz/services/samba

Samba Development and Support, Catalyst IT - Expert Open Source
Solutions