getpwuid(13891) failed Failed to finalize nt token

capricorn cap cool_capricorn80 at
Wed Mar 23 22:32:11 UTC 2022

winbindd , nmb and smb services are running.
do you have any hint for troubleshooting?

We have a plan to upgrade but it will take some time as the server is running some more applications as well.


From: Andrew Bartlett <abartlet at>
Sent: Wednesday, March 23, 2022 9:50 PM
To: capricorn cap <cool_capricorn80 at>; samba-technical at <samba-technical at>
Subject: Re: getpwuid(13891) failed Failed to finalize nt token

On Wed, 2022-03-23 at 21:41 +0000, capricorn cap via samba-technical
> Hi!
> I have joined  4.5.16-Debian to AD.
> sudo net ads testjoin
> Join is OK
> getent passwd works
> getent group works
> But When I try to browse from windows computer then I get popup to
> enter username and password.
> Below is the log message.
> Kerberos ticket principal name is [xyz at TP.NUTI.LOCAL]
> SID S-1-5-21-774976744-1476728229-930774774-3891 -> getpwuid(13891)
> failed
> Failed to map kerberos pac to server info (NT_STATUS_UNSUCCESSFUL)
> Can anyone help me that what can be the solution to fix this issue.

My guess is that nss_winbindd isn't running, or else there is something
fishy going on with idmap, but either way you are running a very old
version and should run a supported version.

Andrew Bartlett
Andrew Bartlett (he/him)
Samba Team Member (since 2001)
Samba Team Lead, Catalyst IT

Samba Development and Support, Catalyst IT - Expert Open Source

More information about the samba-technical mailing list