samba - Mar 2022 - getpwuid(13891) failed Failed to finalize nt token

Fix you smb.conf first, and verify you setup. 

Read : 
https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member
https://wiki.samba.org/index.php/Idmap_config_rid  

I do see one real problem. 
Your workgroup name contains a . (dot). 

Read : 
https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/naming
-conventions-for-computer-domain-site-ou 

I quote. 
Names can contain a period, but names can't start with a period.
Periods should not be used in Microsoft Windows 2000 or later versions of
Windows.
The use of NetBIOS scopes in names is a legacy configuration. It shouldn't
be used with Active Directory forests. 

Fix it and it will work again. 

I suggest, clean up the smb.conf.. Make it small, make it work, then add
extra options you might need again. 

Greetz, 

Louis

> -----Oorspronkelijk bericht-----
> Van: samba-technical 
> [mailto:samba-technical-bounces at lists.samba.org] Namens 
> capricorn cap via samba-technical
> Verzonden: donderdag 24 maart 2022 9:33
> Aan: samba-technical at lists.samba.org
> Onderwerp: Re: getpwuid(13891) failed Failed to finalize nt token
> 
> We have another outdate Debian server with samba 3.5.6 with 
> security = Domain. That was configured really long time ago.
> 
> I can understand that its EOL but any clue about why I am 
> getting this kind of error?
> 
> Thanks
> 
> ________________________________
> From: samba-technical 
> <samba-technical-bounces at lists.samba.org> on behalf of 
> Rowland Penny via samba-technical <samba-technical at
lists.samba.org>
> Sent: Thursday, March 24, 2022 6:39 AM
> To: samba-technical at lists.samba.org <samba-technical at
lists.samba.org>
> Cc: Rowland Penny <rpenny at samba.org>
> Subject: Re: getpwuid(13891) failed Failed to finalize nt token
> 
> On Wed, 2022-03-23 at 22:35 +0000, capricorn cap via samba-technical
> wrote:
> > We never got it to working properly. With Security set as Domain.
> > Only couple of users were able to browse to their home 
> folders and we
> > were getting getuid error so we change the settings to Security ADS
> > and I installed krb5-user package but now we are getting prompt to
> > enter username and password and even though I enter it I 
> got the same
> > error as posted before.
> 
> So it has never worked, what were you using previously ? There must
> have been something, or you would not be using an EOL Samba version on
> an LTS version of Debian that is very close to being EOL.
> 
> Rowland
> 
> 
> 
>

On Thu, 2022-03-24 at 09:40 +0100, L. van Belle via samba
wrote:
> Fix you smb.conf first, and verify you setup. 
> 
> Read : 
> https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member
> https://wiki.samba.org/index.php/Idmap_config_rid  
> 
> I do see one real problem. 
> Your workgroup name contains a . (dot). 
> 
> Read : 
>
https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/naming
> -conventions-for-computer-domain-site-ou 
> 
> I quote. 
> Names can contain a period, but names can't start with a period.
> Periods should not be used in Microsoft Windows 2000 or later
> versions of
> Windows.
> The use of NetBIOS scopes in names is a legacy configuration. It
> shouldn't
> be used with Active Directory forests. 
> 
> Fix it and it will work again. 
> 
> I suggest, clean up the smb.conf.. Make it small, make it work, then
> add
> extra options you might need again. 
> 
> Greetz, 
> 
> Louis
Wrong list Louis, it is being discussed on samba-technical

Rowland