getpwuid(13891) failed Failed to finalize nt token

[capricorn cap]

Its was the previous guy so not sure when it was configured. May be in past it was NT based domain with PDC and BDC but now the domain has FSMO roles.

global]
        workgroup = NUTI.ME
        netbios aliases = FS1, SB5
        server string = %h server (Samba %v)
        security = DOMAIN
        auth methods = winbind
        winbind:ignore domains = ETL_UIP
        map to guest = Bad Uid
        obey pam restrictions = Yes
        passwd program = /usr/bin/passwd %u
        passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
        syslog = 0
        log file = /var/log/samba/log.%m
        max log size = 1000
        server signing = auto
        load printers = No
        local master = No
        domain master = No
        dns proxy = No
        wins server = 192.168.1.34
        kernel oplocks = No
        ldap ssl = no
        panic action = /usr/share/samba/panic-action %d
        idmap uid = 10000-20000
        idmap gid = 10000-20000
        winbind use default domain = Yes
        invalid users = root
        printcap cache time=0
        smb ports = 445

[homes]
        comment = Home Directories
        read only = No
        guest ok = Yes
        browseable = No

[nobackup]
        comment = These files are not backed up
        path = /export1/nobackup
        read only = No
        acl group control = Yes
        guest ok = Yes


________________________________
From: samba-technical <samba-technical-bounces at lists.samba.org> on behalf of Rowland Penny via samba-technical <samba-technical at lists.samba.org>
Sent: Thursday, March 24, 2022 9:05 AM
To: samba-technical at lists.samba.org <samba-technical at lists.samba.org>
Cc: Rowland Penny <rpenny at samba.org>
Subject: Re: getpwuid(13891) failed Failed to finalize nt token

On Thu, 2022-03-24 at 08:32 +0000, capricorn cap via samba-technical
wrote:
> We have another outdate Debian server with samba 3.5.6 with security
> = Domain. That was configured really long time ago.
>
> I can understand that its EOL but any clue about why I am getting
> this kind of error?

Lets see if I understand this correctly:

You have an extremely old Debian server running Samba 3.5.6 which
appears to be a member of an NT4-style domain.

Is this correct ?

If it is, what is the Domain Controller ? A Samba PDC or an AD DC ?

Please post the smb.conf from the Samba 3.5.6 machine.

Rowland