samba - May 2013 - New Samba Error We Have Not Seen Before

We have about 40 samba servers in our domain. The two newest ones are throwing
an error we've never seen before.

[root at vmhost06a samba]# net join
Enter root's password:
dos charset 'CP850' unavailable - using ASCII
convert_string_talloc: Conversion not supported.
Failed to join domain: failed to lookup DC info for domain 'MYCHARTS.MD'
over rpc: Memory allocation error
ADS join did not work, falling back to RPC...
convert_string_talloc: Conversion not supported.
Connection failed: NT_STATUS_NO_MEMORY
Enter root's password:
convert_string_talloc: Conversion not supported.
Could not connect to server RPT01
Connection failed: NT_STATUS_NO_MEMORY
Any thoughts?

Possibly related: It alwways says "could not connect to server RPT01."
I'm not sure why it says this since RPT01 is our oldest domain controller
and it is not referenced in any of the config files. Only servers DC01 and TS04
are mentioned in krb5.conf. I suppose it must be getting it from DNS, but why
only RPT01?

Samba version info follows...

[root at vmhost06a samba]# rpm -qa|grep -i samba
samba-winbind-3.6.9-151.el6.x86_64
samba-3.6.9-151.el6.x86_64
samba-common-3.6.9-151.el6.x86_64
samba-client-3.6.9-151.el6.x86_64
samba-winbind-clients-3.6.9-151.el6.x86_64

--
Eric Robinson






Disclaimer - May 27, 2013 
This email and any files transmitted with it are confidential and intended
solely for 'samba at lists.samba.org'. If you are not the named
addressee you should not disseminate, distribute, copy or alter this email. Any
views or opinions presented in this email are solely those of the author and
might not represent those of Physicians' Managed Care or Physician Select
Management. Warning: Although Physicians' Managed Care or Physician Select
Management has taken reasonable precautions to ensure no viruses are present in
this email, the company cannot accept responsibility for any loss or damage
arising from the use of this email or attachments.
This disclaimer was added by Policy Patrol: http://www.policypatrol.com/

Hello Eric,

Am 27.05.2013 20:32, schrieb Robinson, Eric:
> We have about 40 samba servers in our domain. The two newest ones are
throwing an error we've never seen before.
>
> [root at vmhost06a samba]# net join
> Enter root's password:
> dos charset 'CP850' unavailable - using ASCII
> convert_string_talloc: Conversion not supported.
> Failed to join domain: failed to lookup DC info for domain
'MYCHARTS.MD' over rpc: Memory allocation error
> ADS join did not work, falling back to RPC...
> convert_string_talloc: Conversion not supported.
> Connection failed: NT_STATUS_NO_MEMORY
> Enter root's password:
> convert_string_talloc: Conversion not supported.
> Could not connect to server RPT01
> Connection failed: NT_STATUS_NO_MEMORY
> Any thoughts?
There's an open bug report with the same error:
https://bugzilla.samba.org/show_bug.cgi?id=9080



Is it AD or a NT4 style environment?


Can you join with (if it's AD):
# net ads join -U administrator


> Possibly related: It alwways says "could not connect to server
 > RPT01." I'm not sure why it says this since RPT01 is our oldest
 > domain controller and it is not referenced in any of the config
 > files. Only servers DC01 and TS04 are mentioned in krb5.conf.
 > I suppose it must be getting it from DNS, but why only RPT01?

I guess DNS, too. Does RPT01 have any special role?

Do you have 'dns_lookup_kdc = true'? Then the lookup for the KDC is done
via DNS (I don't know if the hardcoded entries are then ignored). It's 
just a guess.


Regards,
Marc

On Mon, 2013-05-27 at 18:32 +0000, Robinson, Eric wrote:
> We have about 40 samba servers in our domain. The two newest ones are
throwing an error we've never seen before.
> 
> [root at vmhost06a samba]# net join
> Enter root's password:
> dos charset 'CP850' unavailable - using ASCII
This worries me.  I think it may be the source of your issue.  It
suggests your build was without iconv support!  (We removed the internal
code page handling in 3.6 from memory, relying on the system to handle
it for us). 
> convert_string_talloc: Conversion not supported.
> Failed to join domain: failed to lookup DC info for domain
'MYCHARTS.MD' over rpc: Memory allocation error
> ADS join did not work, falling back to RPC...
> convert_string_talloc: Conversion not supported.
> Connection failed: NT_STATUS_NO_MEMORY
> Enter root's password:
> convert_string_talloc: Conversion not supported.
> Could not connect to server RPT01
> Connection failed: NT_STATUS_NO_MEMORY
> Any thoughts?
> 
> Possibly related: It alwways says "could not connect to server
RPT01." I'm not sure why it says this since RPT01 is our oldest domain
controller and it is not referenced in any of the config files. Only servers
DC01 and TS04 are mentioned in krb5.conf. I suppose it must be getting it from
DNS, but why only RPT01?
> 
> Samba version info follows...
> 
> [root at vmhost06a samba]# rpm -qa|grep -i samba
> samba-winbind-3.6.9-151.el6.x86_64
> samba-3.6.9-151.el6.x86_64
> samba-common-3.6.9-151.el6.x86_64
> samba-client-3.6.9-151.el6.x86_64
> samba-winbind-clients-3.6.9-151.el6.x86_64
It seems unlikely that these RPMs are built without iconv support, but
can you verify by getting us the output of smbd -b?

Thanks,

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org