samba - Oct 2022 - Debian. recommended way to migrate Samba DC from stable to backport ?

Hi,

I am running a Samba AD/DC in a Linux Debian Bullseye stable.

My motivation to try the backport package is that is the? way to keep 
the Debian package and still be able to put Windows-11 in the domain. 
Also, many times I red here it is recommended to use the latest Samba 
stable release.

I installed a backport package only once (wireguard in buster, wireguard 
was not even existing in buster stable) so I am a bit worried I am going 
to mess up the important Samba DC server with my scarce experience with 
backports.

I made a backup already of the VM providing the Samba DC, just in case.

I tried to "over-install" the backport on the existing stable samba 
package but it gives me a few errors
---------------------
$> sudo apt install ?samba/bullseye-backports
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Selected version '2:4.16.5+dfsg-1~bpo11+1' (Debian 
Backports:bullseye-backports [amd64]) for 'samba'
Selected version '2:4.16.5+dfsg-1~bpo11+1' (Debian 
Backports:bullseye-backports [all]) for 'samba-common' because of
'samba'
Selected version '2:4.16.5+dfsg-1~bpo11+1' (Debian 
Backports:bullseye-backports [amd64]) for 'samba-common-bin' because of 
'samba'
Selected version '2:4.16.5+dfsg-1~bpo11+1' (Debian 
Backports:bullseye-backports [amd64]) for 'samba-libs' because of 
'samba-common-bin'
Selected version '2:2.5.2+samba4.16.5-1~bpo11+1' (Debian 
Backports:bullseye-backports [amd64]) for 'libldb2' because of
'samba-libs'
Selected version '2.3.3-4~bpo11+1' (Debian Backports:bullseye-backports 
[amd64]) for 'libtalloc2' because of 'libldb2'
Selected version '1.4.6-3~bpo11+1' (Debian Backports:bullseye-backports 
[amd64]) for 'libtdb1' because of 'libldb2'
Selected version '0.11.0-1~bpo11+1' (Debian Backports:bullseye-backports
[amd64]) for 'libtevent0' because of 'libldb2'
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
libtevent0 : Depends: libtalloc2 (>= 2.3.2~) but 2.3.1-2+b1 is to be 
installed
samba : Depends: libldb2 (>= 2:2.5.2) but 2:2.2.3-2~deb11u2 is to be 
installed
 ????????Depends: libtalloc2 (>= 2.3.3-3~) but 2.3.1-2+b1 is to be 
installed
 ????????Depends: libtdb1 (>= 1.4.6-2~) but 1.4.3-1+b1 is to be installed
 ????????Depends: samba-libs (= 2:4.16.5+dfsg-1~bpo11+1) but 
2:4.13.13+dfsg-1~deb11u5 is to be installed
samba-common-bin : Depends: samba-libs (= 2:4.16.5+dfsg-1~bpo11+1) but 
2:4.13.13+dfsg-1~deb11u5 is to be installed
 ???????????????????Depends: libtalloc2 (>= 2.3.3-3~) but 2.3.1-2+b1 is 
to be installed
 ???????????????????Depends: libtdb1 (>= 1.4.6-2~) but 1.4.3-1+b1 is to 
be installed
E: Unable to correct problems, you have held broken packages.
---------------------

. Should i uninstall the "samba" stable package before ?
. If I uninstall the "samba" package will all my domain configuration
be
lost ?
. Should I install the required dependencies for the backport package by 
hand or will apt do alone as usual ?
. Any other suggestion from your experience ?

Thank you in advance.

Nicola

Hi Nicola,

Dr. Nicola Mingotti via samba schreef op 2022-10-18
00:04:
> Hi,
> 
> I am running a Samba AD/DC in a Linux Debian Bullseye stable.
> 
> My motivation to try the backport package is that is the? way to keep
> the Debian package and still be able to put Windows-11 in the domain.
> Also, many times I red here it is recommended to use the latest Samba
> stable release.
> 
> I installed a backport package only once (wireguard in buster,
> wireguard was not even existing in buster stable) so I am a bit
> worried I am going to mess up the important Samba DC server with my
> scarce experience with backports.
> 
> I made a backup already of the VM providing the Samba DC, just in case.
> 
> I tried to "over-install" the backport on the existing stable
samba
> package but it gives me a few errors
> ---------------------
> $> sudo apt install ?samba/bullseye-backports
> Reading package lists... Done
> Building dependency tree... Done
> Reading state information... Done
> Selected version '2:4.16.5+dfsg-1~bpo11+1' (Debian
> Backports:bullseye-backports [amd64]) for 'samba'
> Selected version '2:4.16.5+dfsg-1~bpo11+1' (Debian
> Backports:bullseye-backports [all]) for 'samba-common' because of
> 'samba'
> Selected version '2:4.16.5+dfsg-1~bpo11+1' (Debian
> Backports:bullseye-backports [amd64]) for 'samba-common-bin'
because
> of 'samba'
> Selected version '2:4.16.5+dfsg-1~bpo11+1' (Debian
> Backports:bullseye-backports [amd64]) for 'samba-libs' because of
> 'samba-common-bin'
> Selected version '2:2.5.2+samba4.16.5-1~bpo11+1' (Debian
> Backports:bullseye-backports [amd64]) for 'libldb2' because of
> 'samba-libs'
> Selected version '2.3.3-4~bpo11+1' (Debian
> Backports:bullseye-backports [amd64]) for 'libtalloc2' because of
> 'libldb2'
> Selected version '1.4.6-3~bpo11+1' (Debian
> Backports:bullseye-backports [amd64]) for 'libtdb1' because of
> 'libldb2'
> Selected version '0.11.0-1~bpo11+1' (Debian
> Backports:bullseye-backports [amd64]) for 'libtevent0' because of
> 'libldb2'
> Some packages could not be installed. This may mean that you have
> requested an impossible situation or if you are using the unstable
> distribution that some required packages have not yet been created
> or been moved out of Incoming.
> The following information may help to resolve the situation:
> 
> The following packages have unmet dependencies:
> libtevent0 : Depends: libtalloc2 (>= 2.3.2~) but 2.3.1-2+b1 is to be 
> installed
> samba : Depends: libldb2 (>= 2:2.5.2) but 2:2.2.3-2~deb11u2 is to be 
> installed
> ????????Depends: libtalloc2 (>= 2.3.3-3~) but 2.3.1-2+b1 is to be 
> installed
> ????????Depends: libtdb1 (>= 1.4.6-2~) but 1.4.3-1+b1 is to be 
> installed
> ????????Depends: samba-libs (= 2:4.16.5+dfsg-1~bpo11+1) but
> 2:4.13.13+dfsg-1~deb11u5 is to be installed
> samba-common-bin : Depends: samba-libs (= 2:4.16.5+dfsg-1~bpo11+1) but
> 2:4.13.13+dfsg-1~deb11u5 is to be installed
> ???????????????????Depends: libtalloc2 (>= 2.3.3-3~) but 2.3.1-2+b1 is
> to be installed
> ???????????????????Depends: libtdb1 (>= 1.4.6-2~) but 1.4.3-1+b1 is to
> be installed
> E: Unable to correct problems, you have held broken packages.
> ---------------------
> 
> . Should i uninstall the "samba" stable package before ?
I recommend avoiding issues with old dependencies and such by installing 
a new VM.
> . If I uninstall the "samba" package will all my domain
configuration
> be lost ?]
Probably not. I reckon Samba removes its TDB files on purge only.
> . Should I install the required dependencies for the backport package
> by hand or will apt do alone as usual ?
I install these packages from backports in one command line:

- samba
- samba-dsdb-modules
- samba-vfs-modules
- winbind
- libpam-winbind
- libnss-winbind

... and these from stable in one command line:

- acl
- attr
- libpam-krb5
- krb5-config
- krb5-user
- dnsutils
> . Any other suggestion from your experience ?
I experienced issues when installing all dependencies from backports. 
See: https://lists.samba.org/archive/samba/2022-September/241754.html
> 
> Thank you in advance.
> 
> Nicola
-- 
With kind regards,

William Edwards

18.10.2022 01:04, Dr. Nicola Mingotti via samba wrote:
...
> I tried to "over-install" the backport on the existing stable
samba package but it gives me a few errors
> ---------------------
> $> sudo apt install ?samba/bullseye-backports
You only ask apt to install this particular version of a single package.
But this can't be done because - as it told you - it depends on a bunch
of other packages. All these packages are part of samba and are also
available in bullseye-backports.

The proper way to install something from debian backports is to use -t
argument of apt:

  apt install -t bullseye-backports samba

This way it will be able to install/upgrade all the dependencies too.

[]
> . Should i uninstall the "samba" stable package before ?
It doesn't matter. If you don't uninstall it, your configuration will
most likely be preserved. If you uninstall it, you'll have to configure
it again, - but this also depends on the way how you uninstall, eg,
with purge, dpkg will erase all configuration.
> . If I uninstall the "samba" package will all my domain
configuration be lost ?
Most likely yes, at least I never tested the upgrade process from
uninstalled previous version.
> . Should I install the required dependencies for the backport package by
hand or will apt do alone as usual ?
You can do that manually if you like to.
> . Any other suggestion from your experience ?
It is exactly the same thing with any other samba upgrade.
Samba is not debian-specific.

/mjt