[Samba] Does samba support IDN (Internationalized domain name) ?

[hyoscar wu]

Hi list,

Does samba support IDN (Internationalized domain name) ?

I created a domain in windows server 2008 (function level 2003) and domain
name is "TESTÄÖÜ.COM <http://xn--test-ooa2iub.com/>".

I want to join domain as a member.
When I run "kinit administrator at TESTÄÖÜ.COM" after setting krb5.conf, kinit
failed.

kinit administrator at TESTÄÖÜ.COM
Conversion error: Illegal multibyte sequence(ÄÖÜ.COM<http://xn--4ca0bs.com/>
)
Conversion error: Illegal multibyte sequence(ÄÖÜ.COM<http://xn--4ca0bs.com/>
)
"kinit(v5): Cannot resolve network address for KDC in realm
TESTÄÖÜ.COM<http://xn--test-ooa2iub.com/> while
getting initial credentials"

I added TESTÄÖÜ.COM <http://xn--test-ooa2iub.com/> in /etc/hosts and run
kinit again.

kinit administrator at TESTÄÖÜ.COM
kinit(v5): KRB5 error code 68 while getting initial credentials

Maybe krb5 dose not support IDN but can not find information about IDN in
kerberos web site.

Then I tried /usr/local/samb/bin/net command to do time sync but...

/usr/local/samba/bin/net time set -S
"myadserver.TESTÄÖÜ.COM<http://myadserver.xn--test-ooa2iub.com/>
"
Conversion error: Illegal multibyte sequence(ÄÖÜ.COM<http://xn--4ca0bs.com/>
)
*** glibc detected *** /usr/local/samba/bin/net: free(): invalid pointer:
0xf616b350 ***
======= Backtrace: =========
/lib/libc.so.6[0xf69340f7]
/lib/libc.so.6(cfree+0x89)[0xf6935de9]
/usr/local/samba/lib/private/libgse.so(namecache_fetch+0xce)[0xf6a916be]
/usr/local/samba/lib/private/libgse.so(internal_resolve_name+0x28e)[0xf6a98965]
/usr/local/samba/lib/private/libgse.so(resolve_name_list+0x118)[0xf6a99a24]
/usr/local/samba/lib/private/liblibsmb.so(cli_connect_nb+0x17a)[0xf7498bce]
/usr/local/samba/bin/net[0x8096205]
/usr/local/samba/bin/net[0x809633d]
/usr/local/samba/bin/net[0x80965ca]
/usr/local/samba/bin/net(net_run_function+0x18d)[0x80b8592]
/usr/local/samba/bin/net(net_time+0x67)[0x809670f]
/usr/local/samba/bin/net(net_run_function+0x18d)[0x80b8592]
/usr/local/samba/bin/net(main+0x9fb)[0x80775bb]
/lib/libc.so.6(__libc_start_main+0xe0)[0xf68e4050]
/usr/local/samba/bin/net[0x805d721]
======= Memory map: ========
08048000-08107000 r-xp 00000000 09:0d 739
 /usr/local/samba/bin/net
08107000-0810b000 rw-p 000be000 09:0d 739
 /usr/local/samba/samba
(skip)

I used win7 to test again, win7 can join to
TESTÄÖÜ.COM<http://xn--test-ooa2iub.com/>
,

If any suggestion about samba to join domain with IDN?

Another question: Can I use samba4 to create a domain with IDN?
I did the test as follow:

[~] # /usr/local/samba/bin/samba-tool domain provision
Realm: TESTÄÖÜ.COM <http://xn--test-ooa2iub.com/>
 Domain [TESTÄÖÜ]:
 Server Role (dc, member, standalone) [dc]:
 DNS backend (SAMBA_INTERNAL, BIND9_FLATFILE, BIND9_DLZ, NONE)
[SAMBA_INTERNAL]:
 DNS forwarder IP address (write 'none' to disable forwarding)
[172.17.25.136]:
/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/domain.py:315:
GetPassWarning: Can not control echo on the terminal.
  adminpassplain = getpass("Administrator password: ")
Warning: Password input may be echoed.
Administrator password: admin444 at qnap
/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/domain.py:319:
GetPassWarning: Can not control echo on the terminal.
  adminpassverify = getpass("Retype password: ")
Warning: Password input may be echoed.
Retype password: admin444 at qnap
Out of memory in string_set_upper
ERROR(<class 'samba.provision.ProvisioningError'>): Provision failed -
ProvisioningError: guess_names: Workgroup '' in smb.conf must match chosen
domain 'TESTÄÖÜ'!  Please remove the /etc/config/smb.conf file and let
provision generate it
  File
"/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/domain.py", line
398, in run
    use_rfc2307=use_rfc2307, skip_sysvolacl=False)
  File
"/usr/local/samba/lib/python2.7/site-packages/samba/provision/__init__.py",
line 1978, in provision
    sitename=sitename, rootdn=rootdn)
  File
"/usr/local/samba/lib/python2.7/site-packages/samba/provision/__init__.py",
line 609, in guess_names
    raise ProvisioningError("guess_names: Workgroup '%s' in smb.conf must
match chosen domain '%s'!  Please remove the %s file and let provision
generate it" % (lp.get("workgroup").upper(), domain, lp.configfile))

Does samba support IDN (Internationalized domain name) ?

Hywuoscar