[Samba] Samba share not working: getpwuid(1000) failed, Failed to finalize nt token & NT_STATUS_UNSUCCESSFUL

[Rowland penny]

On 26/11/2019 22:54, jillelaine via samba wrote:
> I have a small home network with server and 5 clients all on an 
> internal LAN with private IPs.
>
> Samba, Version 4.7.6-Ubuntu, file sharing is not working on the server 
> for any of the 5 clients. I have tried both mount.cifs and smbclient. 
> The same errors are thrown in the server's samba logs for all 
> connection attempts, regardless of how the client tries to connect: 
> getpwuid(1000) failed, Failed to finalize nt token & 
> NT_STATUS_UNSUCCESSFUL
>
> Below is some data. Please tell me what else is needed to help 
> diagnose this problem. Thank you for your help.
> ---------------------------
> SERVER - jazz
> Kubuntu VERSION="18.04.3 LTS (Bionic Beaver)"
> Samba, Version 4.7.6-Ubuntu
>
> Shared directory 'samba' and permissions
> drwxr-xr-x   4 root sambashare       4096 Nov 25 16:04 samba
> --------------------------
> Contents of 'samba' directory
> drwxr-xr-x  4 root  sambashare 4096 Nov 25 16:04 .
> drwxr-xr-x 25 root  root       4096 Nov 25 15:57 ..
> drwxrws---  2 root  sambashare 4096 Nov 25 16:04 users
> ---------------------------
> smb.conf
> [global]
>     workgroup = WORKGROUP
>     server string = %h server (Samba, Ubuntu)
>     dns proxy = no
>     root directory = /samba
>     log file = /var/log/samba/log.%m
>     max log size = 1000
>     log level = 3
>     panic action = /usr/share/samba/panic-action %d
>     server role = standalone server
>     passdb backend = tdbsam
>     obey pam restrictions = yes
>     unix password sync = yes
>     passwd program = /usr/bin/passwd %u
>     passwd chat = *Enter\snew\s*\spassword:* %n\n 
> *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
>     pam password change = yes
>     map to guest = bad user
>     usershare allow guests = yes
>     guest account = jj
>
> [users]
>     comment = Our Jazz Files
>     path = /samba/users
>     browseable = yes
>     read only = no
>     create mask = 0775
>     directory mask = 0775
>     guest ok = yes

I take it that you have created 'jj' on your standalone server and then 
made it a Samba user with 'smbpasswd -a jj'

If so, why have made the guest user 'jj' as well ?

If you want/need guest access, remove 'guest account = jj'

If you do not want/need guest access and only want/need authenticated 
access, remove 'map to guest = bad user', 'guest account = jj' and 
'guest ok = yes'

Rowland