Comment 36 for bug 50385

samba uses two directories:
 * private-dir (/etc/samba/private by default) to hold various "secret" tdbs
 * state-dir (/var/lib/samba by default)
fhs-filespaths.patch ensures that for passdb.tdb, secrets.tdb and schannel_store.tdb, we use state-dir instead of private-dir.

qemu overrides private-dir, but not state-dir.

One fix for this bug would be to set private-dir=/var/lib/samba and drop the patch, that would allow qemu to happily override it. The potential regression is about all the other files that use private-dir directly. The only one I could find in code is idmap2.tdb (code in winbindd/idmap_tdb2.c). That one could probably live in /var/lib/samba as well, though it could cause upgrade headaches.