[Samba] Error in samba-tool dbcheck after updating to samba-4.9.1

[Rommel Rodriguez Toirac]

 Hello all;
I use CentOS 7.5.1804
I update from samba-4.8.2 to samba-4.9.1 and finish with not errors, but when I run 

samba-tool dbcheck --cross-ncs 

I have the error:

[root at gtmad ~]# samba-tool dbcheck --cross-ncs    
Checking 4087 objects
ERROR(<type 'exceptions.UnicodeEncodeError'>): uncaught exception - 'ascii' codec can't encode character u'\xe9' in position 319: ordinal not in range(128)
  File "/usr/lib64/python2.7/site-packages/samba/netcmd/__init__.py", line 177, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib64/python2.7/site-packages/samba/netcmd/dbcheck.py", line 157, in run
    controls=controls, attrs=attrs)
  File "/usr/lib64/python2.7/site-packages/samba/dbchecker.py", line 221, in check_database
    error_count += self.check_object(object.dn, attrs=attrs)
  File "/usr/lib64/python2.7/site-packages/samba/dbchecker.py", line 2230, in check_object
    error_count += self.check_dn(obj, attrname, syntax_oid)
  File "/usr/lib64/python2.7/site-packages/samba/dbchecker.py", line 1324, in check_dn
    v_dn = dsdb_Dn(self.samdb, v.decode('utf8'))
  File "/usr/lib64/python2.7/site-packages/samba/common.py", line 101, in __init__
    self.dn = ldb.Dn(samdb, self.dnstring)

I use the configure like this:

./configure --enable-fhs --prefix=/usr --sysconfdir=/etc --localstatedir=/var --enable-debug --enable-selftest -j2 -p --cross-answers --cross-execute --enable-cups --disable-iprint --with-acl-support  --enable-gnutls --with-profiling-data --with-systemd

 My /etc/samba/smb.conf is this:

# Global parameters
[global]
        eventlog list = Application System Security SyslogLinux
        ldap server require strong auth = allow_sasl_over_tls
        log file = /var/log/samba/%m.log
        log level = 3
        max log size = 5000
        netbios name = GTMAD
        realm = GTM.ONAT.GOB.CU
        server role = active directory domain controller
        server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbindd, ntp_signd, kcc, dnsupdate
        time server = Yes
        tls cafile = /var/lib/samba/private/tls/cacert.pem
        tls certfile = /var/lib/samba/private/tls/gtmad.gtm.onat.gob.cu.cert
        tls enabled = Yes
        tls keyfile = /var/lib/samba/private/tls/gtmad.gtm.onat.gob.cu.key
        workgroup = ATGTM00
        idmap_ldb:use rfc2307 = yes

[netlogon]
        path = /var/lib/samba/sysvol/gtm.onat.gob.cu/scripts
        read only = No

[sysvol]
        path = /var/lib/samba/sysvol
        read only = No
   
 Any idea of what could be bad?
 
-- 
Rommel Rodriguez Toirac
rommelrt at nauta.cu