[Pkg-samba-maint] Bug#989646: samba: Samba AD backup does not work with includes in smb.conf

[Juergen Pfennig]

Package: samba
Version: 2:4.13.5+dfsg-2
Severity: normal

Dear Maintainer,

As 'basic samba' is deprecated more sites have to use a samba full ad setup.
This causes some implementation problems to affect more sites. Using ad,
for maintenance on will have to create ad backups using 'samba-tool' as
decribed at:

   https://wiki.samba.org/index.php/Back_up_and_Restoring_a_Samba_AD_DC

This procedure fails when your smb.conf contains "include" statements.
The error-generated message is meaningless, the python code does not
help, the smb.conf parser is not implemented in python (is native code).

There are good reasons to use includes, in my case some of the included
data is auto-generated by other tools. Here is my (simplified) smb.conf:

[global]
    realm = CENTAURI.HOME
    server role = active directory domain controller
    workgroup = CENTAURI
    dns forwarder = 127.0.0.2
    idmap_ldb:use rfc2307 = yes
    kdc:server ticket lifetime = 60
    kdc:user ticket lifetime = 60
    kdc:user renewal lifetime = 189
    ###
       include = /etc/samba/networks.conf
    ###
    netbios name = ALPHA1
    netbios aliases = ALPHA
    disable netbios = no
    ###
       include = /etc/samba/services.conf
    ###
[netlogon]
    path = /var/lib/samba/sysvol/centauri.home/scripts
    read only = No
[sysvol]
    path = /var/lib/samba/sysvol
    read only = No

Thanks
Jürgen

-- Package-specific info:
* /etc/samba/smb.conf present, but not attached
* /var/lib/samba/dhcp.conf present, but not attached

-- System Information:
Debian Release: 11.0
  APT prefers testing-security
  APT policy: (500, 'testing-security'), (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 5.10.0-7-amd64 (SMP w/4 CPU threads)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_IE.UTF-8, LC_CTYPE=en_IE.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages samba depends on:
ii  adduser              3.118
ii  dpkg                 1.20.9
ii  init-system-helpers  1.60
ii  libbsd0              0.11.3-1
ii  libc6                2.31-12
ii  libgnutls30          3.7.1-3
ii  libldb2              2:2.2.0-3.1
ii  libpam-modules       1.4.0-7
ii  libpam-runtime       1.4.0-7
ii  libpopt0             1.18-2
ii  libpython3.9         3.9.2-1
ii  libtalloc2           2.3.1-2+b1
ii  libtasn1-6           4.16.0-2
ii  libtdb1              1.4.3-1+b1
ii  libtevent0           0.10.2-1
ii  libwbclient0         2:4.13.5+dfsg-2
ii  lsb-base             11.1.0
ii  procps               2:3.3.17-5
ii  python3              3.9.2-3
ii  python3-dnspython    2.0.0-1
ii  python3-samba        2:4.13.5+dfsg-2
ii  samba-common         2:4.13.5+dfsg-2
ii  samba-common-bin     2:4.13.5+dfsg-2
ii  samba-libs           2:4.13.5+dfsg-2
ii  tdb-tools            1.4.3-1+b1

Versions of packages samba recommends:
ii  attr                1:2.4.48-6
ii  logrotate           3.18.0-2
ii  python3-markdown    3.3.4-1
ii  samba-dsdb-modules  2:4.13.5+dfsg-2
ii  samba-vfs-modules   2:4.13.5+dfsg-2

Versions of packages samba suggests:
pn  bind9          <none>
pn  bind9utils     <none>
pn  ctdb           <none>
ii  ldb-tools      2:2.2.0-3.1
ii  ntp            1:4.2.8p15+dfsg-1
pn  smbldap-tools  <none>
pn  ufw            <none>
ii  winbind        2:4.13.5+dfsg-2

-- no debconf information