[Samba] Failed to prepare gensec: NT_STATUS_INVALID_SERVER_STATE

Flole flole at flole.de
Mon Nov 22 18:46:17 UTC 2021

I'm seeing the same issue since updating to 4.13 on my Ubuntu system and 
I have done additional debugging and reported an issue for the Ubuntu 
package at https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1951490.

To sum it up here aswell:

Enabling debug logs show that this is caused by the ownership of a 
directory which samba complains is not matching:

[2021/11/19 01:48:37.482365, 4, effective(30000XX, 100), real(30000XX, 
   Create of internal pipe \pipe\spoolss requested
[2021/11/19 01:48:37.485785, 3, effective(30000XX, 100), real(30000XX, 
0)] ../../lib/util/util.c:483(directory_create_or_exist_strict)
   directory_create_or_exist_strict: invalid ownership on directory 
[2021/11/19 01:48:37.485807, 1, effective(30000XX, 100), real(30000XX, 
0)] ../../source3/auth/auth_samba4.c:248(prepare_gensec)
   imessaging_init failed

The issue is caused by /var/lib/samba/private/msg.sock being owned by 
root:root in my case (and it gets created with those permissions aswell 
if I delete it), but 
uses geteuid() which is sometimes the user ID of the connecting user (as 
can be seen above, XX is the number that represents the uid of the 
windows user connecting).

I am not sure if this is related to my "unable to print"-issue but this 
happens whenever I try to print and whenever the print queue is 
refreshed by a client.

More information about the samba mailing list