- Add lockdir.patch (fixes #1012593)

- Add unixgroup-nogroup.patch (fixes #1012592)

debian/patches/lockdir.patch

@@ -0,0 +1,11 @@
+--- a/ipaclient/install/ipa_client_samba.py	2025-02-24 10:25:07.103671553 +0100
++++ b/ipaclient/install/ipa_client_samba.py	2025-02-24 10:46:42.645416075 +0100
+@@ -449,7 +449,7 @@
+     # in /var/lib/samba and /var/lib/samba/private
+     for smbpath in (paths.SAMBA_DIR,
+                     os.path.join(paths.SAMBA_DIR, "private"),
+-                    os.path.join(paths.SAMBA_DIR, "lock")):
++                    "/run/samba":
+         tdb_files = [
+             os.path.join(smbpath, tdb_file)
+             for tdb_file in os.listdir(smbpath)

debian/patches/series

@@ -3,6 +3,8 @@
 # not upstreamable
 dnssec-race-wa.diff
 fix-sssd-socket-activation.diff
+unixgroup-nogroup.patch
+lockdir.patch
 
 # send upstream
 map-ssh-service.diff

debian/patches/unixgroup-nogroup.patch

@@ -0,0 +1,23 @@
+--- a/ipaclient/install/ipa_client_samba.py	2025-02-24 10:25:07.103671553 +0100
++++ b/ipaclient/install/ipa_client_samba.py	2025-02-24 10:25:32.336109522 +0100
+@@ -377,17 +377,17 @@
+         "groupmap",
+         "add",
+         "sid=S-1-5-32-546",
+-        "unixgroup=nobody",
++        "unixgroup=nogroup",
+         "type=builtin",
+     ]
+ 
+-    logger.info("Map BUILTIN\\Guests to a group 'nobody'")
++    logger.info("Map BUILTIN\\Guests to a group 'nogroup'")
+     try:
+         ipautil.run(args)
+     except ipautil.CalledProcessError as e:
+         if "already mapped to SID S-1-5-32-546" not in e.stdout:
+             logger.error(
+-                'Cannot map BUILTIN\\Guests to a group "nobody". Error: %s',
++                'Cannot map BUILTIN\\Guests to a group "nogroup". Error: %s',
+                 e
+             )
+             raise