[Pkg-samba-maint] Bug#999876: samba: winbind fails to start with `allow trusted domains: no`

[John Kristensen]

Package: samba
Version: 2:4.13.13+dfsg-1~deb11u2
Severity: important
Tags: upstream

Dear Maintainer,

When setting `allow trusted domains: no` in `/etc/samba/smb.conf` the winbind
service fails to start with the following error:

    [2021/11/17 19:07:33.137859,  0] ../../source3/winbindd/winbindd_cache.c:3203(initialize_winbindd_cache)
      initialize_winbindd_cache: clearing cache and re-creating with version number 2
    [2021/11/17 19:07:33.140746,  0] ../../source3/winbindd/winbindd_util.c:1140(init_domain_list)
      init_domain_list: add_trusted_domain BUILTIN returned NT_STATUS_NO_SUCH_DOMAIN
    [2021/11/17 19:07:33.142209,  0] ../../source3/winbindd/winbindd.c:1458(winbindd_register_handlers)
      unable to initialize domain list

Setting the default value of `allow trusted domains: yes` allows winbind to
start without any problems.

This seems to be a know upstream bug[1] and there is a one-line patch to
fix the problem[2].

Thanks,
John.

[1] https://bugzilla.samba.org/show_bug.cgi?id=14899
[2] https://gitlab.com/samba-team/samba/-/merge_requests/2246/diffs


-- Package-specific info:
* /etc/samba/smb.conf present, but not attached
* /var/lib/samba/dhcp.conf not present

-- System Information:
Debian Release: 11.0
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.10.0-8-amd64 (SMP w/1 CPU thread)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), LANGUAGE=en_AU:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages samba depends on:
ii  adduser              3.118
ii  dpkg                 1.20.9
ii  init-system-helpers  1.60
ii  libbsd0              0.11.3-1
ii  libc6                2.31-13
ii  libgnutls30          3.7.1-5
ii  libldb2              2:2.2.3-2~deb11u1
ii  libpam-modules       1.4.0-9
ii  libpam-runtime       1.4.0-9
ii  libpopt0             1.18-2
ii  libpython3.9         3.9.2-1
ii  libtalloc2           2.3.1-2+b1
ii  libtasn1-6           4.16.0-2
ii  libtdb1              1.4.3-1+b1
ii  libtevent0           0.10.2-1
ii  libwbclient0         2:4.13.13+dfsg-1~deb11u2
ii  lsb-base             11.1.0
ii  procps               2:3.3.17-5
ii  python3              3.9.2-3
ii  python3-dnspython    2.0.0-1
ii  python3-samba        2:4.13.13+dfsg-1~deb11u2
ii  samba-common         2:4.13.13+dfsg-1~deb11u2
ii  samba-common-bin     2:4.13.13+dfsg-1~deb11u2
ii  samba-libs           2:4.13.13+dfsg-1~deb11u2
ii  tdb-tools            1.4.3-1+b1

Versions of packages samba recommends:
ii  attr                1:2.4.48-6
ii  logrotate           3.18.0-2
ii  python3-markdown    3.3.4-1
ii  samba-dsdb-modules  2:4.13.13+dfsg-1~deb11u2
ii  samba-vfs-modules   2:4.13.13+dfsg-1~deb11u2

Versions of packages samba suggests:
pn  bind9          <none>
pn  bind9utils     <none>
pn  ctdb           <none>
pn  ldb-tools      <none>
pn  ntp | chrony   <none>
pn  smbldap-tools  <none>
pn  ufw            <none>
ii  winbind        2:4.13.13+dfsg-1~deb11u2

-- no debconf information