The patches of samba have to be cherry-picked and rebased to (UCS 5.1 and) UCS 5.2.
see https://git.knut.univention.de/univention/ucs/-/issues/2078