getpwuid(13891) failed Failed to finalize nt token
capricorn cap
cool_capricorn80 at hotmail.com
Fri Mar 25 21:46:39 UTC 2022
The old server doesn't have winbind in nsswitch.conf but I can see in samba documentation its stating to have.
passwd: files winbind
group: files winbind
My old server has
passwd: files nis
group: files nis
Does this make any difference?
________________________________
From: capricorn cap <cool_capricorn80 at hotmail.com>
Sent: Thursday, March 24, 2022 2:56 PM
To: samba-technical at lists.samba.org <samba-technical at lists.samba.org>
Cc: Rowland Penny <rpenny at samba.org>
Subject: Re: getpwuid(13891) failed Failed to finalize nt token
Its was the previous guy so not sure when it was configured. May be in past it was NT based domain with PDC and BDC but now the domain has FSMO roles.
global]
workgroup = NUTI.ME
netbios aliases = FS1, SB5
server string = %h server (Samba %v)
security = DOMAIN
auth methods = winbind
winbind:ignore domains = ETL_UIP
map to guest = Bad Uid
obey pam restrictions = Yes
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
syslog = 0
log file = /var/log/samba/log.%m
max log size = 1000
server signing = auto
load printers = No
local master = No
domain master = No
dns proxy = No
wins server = 192.168.1.34
kernel oplocks = No
ldap ssl = no
panic action = /usr/share/samba/panic-action %d
idmap uid = 10000-20000
idmap gid = 10000-20000
winbind use default domain = Yes
invalid users = root
printcap cache time=0
smb ports = 445
[homes]
comment = Home Directories
read only = No
guest ok = Yes
browseable = No
[nobackup]
comment = These files are not backed up
path = /export1/nobackup
read only = No
acl group control = Yes
guest ok = Yes
________________________________
From: samba-technical <samba-technical-bounces at lists.samba.org> on behalf of Rowland Penny via samba-technical <samba-technical at lists.samba.org>
Sent: Thursday, March 24, 2022 9:05 AM
To: samba-technical at lists.samba.org <samba-technical at lists.samba.org>
Cc: Rowland Penny <rpenny at samba.org>
Subject: Re: getpwuid(13891) failed Failed to finalize nt token
On Thu, 2022-03-24 at 08:32 +0000, capricorn cap via samba-technical
wrote:
> We have another outdate Debian server with samba 3.5.6 with security
> = Domain. That was configured really long time ago.
>
> I can understand that its EOL but any clue about why I am getting
> this kind of error?
Lets see if I understand this correctly:
You have an extremely old Debian server running Samba 3.5.6 which
appears to be a member of an NT4-style domain.
Is this correct ?
If it is, what is the Domain Controller ? A Samba PDC or an AD DC ?
Please post the smb.conf from the Samba 3.5.6 machine.
Rowland
More information about the samba-technical
mailing list