getpwuid(13891) failed Failed to finalize nt token

capricorn cap cool_capricorn80 at
Thu Mar 24 14:56:00 UTC 2022

Its was the previous guy so not sure when it was configured. May be in past it was NT based domain with PDC and BDC but now the domain has FSMO roles.

        workgroup = NUTI.ME
        netbios aliases = FS1, SB5
        server string = %h server (Samba %v)
        security = DOMAIN
        auth methods = winbind
        winbind:ignore domains = ETL_UIP
        map to guest = Bad Uid
        obey pam restrictions = Yes
        passwd program = /usr/bin/passwd %u
        passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
        syslog = 0
        log file = /var/log/samba/log.%m
        max log size = 1000
        server signing = auto
        load printers = No
        local master = No
        domain master = No
        dns proxy = No
        wins server =
        kernel oplocks = No
        ldap ssl = no
        panic action = /usr/share/samba/panic-action %d
        idmap uid = 10000-20000
        idmap gid = 10000-20000
        winbind use default domain = Yes
        invalid users = root
        printcap cache time=0
        smb ports = 445

        comment = Home Directories
        read only = No
        guest ok = Yes
        browseable = No

        comment = These files are not backed up
        path = /export1/nobackup
        read only = No
        acl group control = Yes
        guest ok = Yes

From: samba-technical <samba-technical-bounces at> on behalf of Rowland Penny via samba-technical <samba-technical at>
Sent: Thursday, March 24, 2022 9:05 AM
To: samba-technical at <samba-technical at>
Cc: Rowland Penny <rpenny at>
Subject: Re: getpwuid(13891) failed Failed to finalize nt token

On Thu, 2022-03-24 at 08:32 +0000, capricorn cap via samba-technical
> We have another outdate Debian server with samba 3.5.6 with security
> = Domain. That was configured really long time ago.
> I can understand that its EOL but any clue about why I am getting
> this kind of error?

Lets see if I understand this correctly:

You have an extremely old Debian server running Samba 3.5.6 which
appears to be a member of an NT4-style domain.

Is this correct ?

If it is, what is the Domain Controller ? A Samba PDC or an AD DC ?

Please post the smb.conf from the Samba 3.5.6 machine.


More information about the samba-technical mailing list