[Samba] Repetitive warnings in our winbindd logs NT_STATUS_NONE_MAPPED

[Kamal Chikh echioukh]

Hello,

OS : Rocky Linux 8.10
Samba AD 4.20.7

We have a lot of winbindd warnings which mainly concern 3 SIDs that winbind can't map to their uid/gid :

 Failed with NT_STATUS_NONE_MAPPED.
  Could not convert sid S-1-5-21-4033032984-1195938581-1271113577-5119: NT_STATUS_NONE_MAPPED
  Failed with NT_STATUS_NONE_MAPPED.
  Could not convert sid S-1-5-21-4033032984-1195938581-1271113577-6652: NT_STATUS_NONE_MAPPED
  Failed with NT_STATUS_NONE_MAPPED.
  wb_lookupsid_recv failed with NT_STATUS_NONE_MAPPED.
  Failed with NT_STATUS_NONE_MAPPED.
  Could not convert sid S-1-5-21-4033032984-1195938581-1271113577-6652: NT_STATUS_NONE_MAPPED
  Failed with NT_STATUS_NONE_MAPPED.
  Could not convert sid S-1-5-21-4033032984-1195938581-1271113577-5173: NT_STATUS_NONE_MAPPED
  Failed with NT_STATUS_NONE_MAPPED.
  wb_lookupsid_recv failed with NT_STATUS_NONE_MAPPED.
  Failed with NT_STATUS_NONE_MAPPED.
  Could not convert sid S-1-5-21-4033032984-1195938581-1271113577-5173: NT_STATUS_NONE_MAPPED
  Failed with NT_STATUS_NONE_MAPPED.
  Could not convert sid S-1-5-21-4033032984-1195938581-1271113577-5119: NT_STATUS_NONE_MAPPED
  Failed with NT_STATUS_NONE_MAPPED.
  wb_lookupsid_recv failed with NT_STATUS_NONE_MAPPED.
  Failed with NT_STATUS_NONE_MAPPED.
  Could not convert sid S-1-5-21-4033032984-1195938581-1271113577-5119: NT_STATUS_NONE_MAPPED
  Failed with NT_STATUS_NONE_MAPPED.
.
.
.

wbinfo -S S-1-5-21-4033032984-1195938581-1271113577-5119
3000062
wbinfo -S S-1-5-21-4033032984-1195938581-1271113577-5173
3000213
wbinfo -S S-1-5-21-4033032984-1195938581-1271113577-6652
3000104

wbinfo -s S-1-5-21-4033032984-1195938581-1271113577-5119
failed to call wbcLookupSid: WBC_ERR_DOMAIN_NOT_FOUND
Could not lookup sid S-1-5-21-4033032984-1195938581-1271113577-5119
wbinfo -s S-1-5-21-4033032984-1195938581-1271113577-6652
failed to call wbcLookupSid: WBC_ERR_DOMAIN_NOT_FOUND
Could not lookup sid S-1-5-21-4033032984-1195938581-1271113577-6652
wbinfo -s S-1-5-21-4033032984-1195938581-1271113577-5173
failed to call wbcLookupSid: WBC_ERR_DOMAIN_NOT_FOUND
Could not lookup sid S-1-5-21-4033032984-1195938581-1271113577-5173

wbinfo -Y S-1-5-21-4033032984-1195938581-1271113577-5119
3000062
wbinfo -Y S-1-5-21-4033032984-1195938581-1271113577-6652
3000104
wbinfo -Y S-1-5-21-4033032984-1195938581-1271113577-5173
3000213

wbinfo --uid-to-sid=3000104
S-1-5-21-4033032984-1195938581-1271113577-6652
[root at antares samba]$  wbinfo --uid-to-sid=3000062
S-1-5-21-4033032984-1195938581-1271113577-5119
[root at antares samba]$  wbinfo --uid-to-sid=3000213
S-1-5-21-4033032984-1195938581-1271113577-5173

When I try to remove uid to sid mapping in idmap, I get :

wbinfo  --remove-uid-mapping=3000062,S-1-5-21-4033032984-1195938581-1271113577-5119
failed to call wbcRemoveUidMapping: WBC_ERR_NOT_IMPLEMENTED
Could not remove uid to sid mapping

wbinfo --remove-uid-mapping=3000104,S-1-5-21-4033032984-1195938581-1271113577-6652
failed to call wbcRemoveUidMapping: WBC_ERR_NOT_IMPLEMENTED
Could not remove uid to sid mapping

 wbinfo --remove-uid-mapping=3000213,S-1-5-21-4033032984-1195938581-1271113577-5173
failed to call wbcRemoveUidMapping: WBC_ERR_NOT_IMPLEMENTED
Could not remove uid to sid mapping

Same error when removing gid to sid mapping in idmap.

Can you please help me to solve this problem.

Running 'net cache flush' on each DC didn't help.

Best Regards,
__________________________

kamal Chikh Echioukh