[Samba] Could not convert sid S-0-0

[Rowland Penny]

On Wed, 25 Sep 2024 07:37:31 +0200
Jochen Eggemann via samba <samba at lists.samba.org> wrote:

> Here are the lines of the winbind.log justs after a restart of
> winbind:
> 
> [2024/09/25 07:32:24.878544,  1] 
> ../../source3/winbindd/wb_lookupsid.c:102(wb_lookupsid_recv)
>    Failed with STATUS_SOME_UNMAPPED.
> [2024/09/25 07:32:41.921563,  0] 
> ../../source3/winbindd/winbindd_dual.c:1964(winbindd_sig_term_handler)
>    Got sig[15] terminate (is_parent=1)
> [2024/09/25 07:32:42.042654,  0] 
> ../../source3/winbindd/winbindd.c:1441(main)
>    winbindd version 4.19.3-SerNet-5ubuntu22.04 started.
>    Copyright Andrew Tridgell and the Samba Team 1992-2023
> [2024/09/25 07:32:57.345622,  1] 
> ../../source3/winbindd/winbindd_getgroups.c:259(winbindd_getgroups_recv)
>    Could not convert sid S-0-0: NT_STATUS_NONE_MAPPED
> [2024/09/25 07:32:57.347134,  1] 
> ../../source3/winbindd/winbindd_getgroups.c:259(winbindd_getgroups_recv)
>    Could not convert sid S-0-0: NT_STATUS_NONE_MAPPED
> [2024/09/25 07:32:57.348522,  1] 
> ../../source3/winbindd/winbindd_getgroups.c:259(winbindd_getgroups_recv)
>    Could not convert sid S-0-0: NT_STATUS_NONE_MAPPED
> [2024/09/25 07:32:57.444060,  1] 
> ../../source3/winbindd/winbindd_getgroups.c:259(winbindd_getgroups_recv)
>    Could not convert sid S-0-0: NT_STATUS_NONE_MAPPED
> [2024/09/25 07:32:57.451309,  1] 
> ../../source3/winbindd/winbindd_getgroups.c:259(winbindd_getgroups_recv)
>    Could not convert sid S-0-0: NT_STATUS_NONE_MAPPED
> [2024/09/25 07:32:57.455359,  1] 
> ../../source3/winbindd/winbindd_getgroups.c:259(winbindd_getgroups_recv)
>    Could not convert sid S-0-0: NT_STATUS_NONE_MAPPED
> [2024/09/25 07:32:57.456963,  1] 
> ../../source3/winbindd/winbindd_getgroups.c:259(winbindd_getgroups_recv)
>    Could not convert sid S-0-0: NT_STATUS_NONE_MAPPED
> [2024/09/25 07:32:57.464293,  1] 
> ../../source3/winbindd/winbindd_getgroups.c:259(winbindd_getgroups_recv)
>    Could not convert sid S-0-0: NT_STATUS_NONE_MAPPED
> 
> The ouptut of testparm -s without the shares:
> 
> Load smb config files from /etc/samba/smb.conf
> Loaded services file OK.
> Weak crypto is allowed by GnuTLS (e.g. NTLM as a compatibility
> fallback)
> 
> Server role: ROLE_DOMAIN_MEMBER
> 
> # Global parameters
> [global]
>          bind interfaces only = Yes
>          cups server = No
>          deadtime = 15
>          disable netbios = Yes
>          disable spoolss = Yes
>          interfaces = 172.21.0.1 127.0.0.1
>          load printers = No
>          log file = /var/log/samba/%m.log
>          netbios aliases = WPKG-HM
>          printcap name = /dev/null
>          realm = NFV.NW-FVA.DE
>          security = ADS
>          smb1 unix extensions = No
>          smb ports = 445
>          socket options = IPTOS_LOWDELAY TCP_NODELAY
>          template homedir = /home/smb/%U
>          winbind max clients = 1000
>          winbind max domain connections = 10
>          winbind refresh tickets = Yes
>          wins server = No
>          workgroup = NFV
>          idmap config nfv : range = 1000-2999999
>          idmap config nfv : backend = ad
>          idmap config * : range = 3000000-3100000
>          idmap config * : backend = tdb
>          hosts allow = localhost 172.17.242.0/23 172.20.0.0/16 
> 172.21.0.0/16 192.168.1.0/24 192.168.100.0/24
>          map acl inherit = Yes
>          printing = bsd
>          use sendfile = Yes
>          vfs objects = acl_xattr
> 

There is nothing in that smb.conf (that I can see) that should be
causing your problem, though I would remove a few lines (you have
turned netbios off so the netbios related lines could be removed and
'cups server' & 'wins server' do not take boolean values).
It seems possible that it was upgraded from an NT4-style domain.

I am using Samba 4.20.4 on Debian bookworm and when I restart winbind,
I just get this:

 [2024/09/25 09:55:52.919539,  0] source3/winbindd/winbindd.c:1450(main)
  winbindd version 4.20.4-Debian-4.20.4+dfsg-1~bpo12+1 started.
  Copyright Andrew Tridgell and the Samba Team 1992-2024

Try cleaning up your smb.conf and/or upgrading Samba.

Rowland