samba - Mar 2014 - Does samba support IDN (Internationalized domain name) ?

Hi list,

Does samba support IDN (Internationalized domain name) ?

I created a domain in windows server 2008 (function level 2003) and domain
name is "TEST???.COM <http://xn--test-ooa2iub.COM>".

I want to join domain as a member.
When I run "kinit administrator at TEST???.COM" after setting
krb5.conf, kinit
failed.

kinit administrator at TEST???.COM
Conversion error: Illegal multibyte sequence(???.COM
<http://xn--4ca0bs.COM>
)
Conversion error: Illegal multibyte sequence(???.COM
<http://xn--4ca0bs.COM>
)
"kinit(v5): Cannot resolve network address for KDC in realm
TEST???.COM<http://xn--test-ooa2iub.COM>while getting initial
credentials"

I added TEST???.COM <http://xn--test-ooa2iub.COM> in /etc/hosts and run
kinit again.

kinit administrator at TEST???.COM
kinit(v5): KRB5 error code 68 while getting initial credentials

Maybe krb5 dose not support IDN but can not find information about IDN in
kerberos web site.

Then I tried /usr/local/samb/bin/net command to do time sync but...

/usr/local/samba/bin/net time set -S
"myadserver.TEST???.COM<http://myadserver.xn--test-ooa2iub.COM>
"
Conversion error: Illegal multibyte sequence(???.COM
<http://xn--4ca0bs.COM>
)
*** glibc detected *** /usr/local/samba/bin/net: free(): invalid pointer:
0xf616b350 ***
======= Backtrace: ========/lib/libc.so.6[0xf69340f7]
/lib/libc.so.6(cfree+0x89)[0xf6935de9]
/usr/local/samba/lib/private/libgse.so(namecache_fetch+0xce)[0xf6a916be]
/usr/local/samba/lib/private/libgse.so(internal_resolve_name+0x28e)[0xf6a98965]
/usr/local/samba/lib/private/libgse.so(resolve_name_list+0x118)[0xf6a99a24]
/usr/local/samba/lib/private/liblibsmb.so(cli_connect_nb+0x17a)[0xf7498bce]
/usr/local/samba/bin/net[0x8096205]
/usr/local/samba/bin/net[0x809633d]
/usr/local/samba/bin/net[0x80965ca]
/usr/local/samba/bin/net(net_run_function+0x18d)[0x80b8592]
/usr/local/samba/bin/net(net_time+0x67)[0x809670f]
/usr/local/samba/bin/net(net_run_function+0x18d)[0x80b8592]
/usr/local/samba/bin/net(main+0x9fb)[0x80775bb]
/lib/libc.so.6(__libc_start_main+0xe0)[0xf68e4050]
/usr/local/samba/bin/net[0x805d721]
======= Memory map: =======08048000-08107000 r-xp 00000000 09:0d 739
 /usr/local/samba/bin/net
08107000-0810b000 rw-p 000be000 09:0d 739
 /usr/local/samba/samba
(skip)

I used win7 to test again, win7 can join to
TEST???.COM<http://xn--test-ooa2iub.COM>
,

If any suggestion about samba to join domain with IDN?

Another question: Can I use samba4 to create a domain with IDN?
I did the test as follow:

[~] # /usr/local/samba/bin/samba-tool domain provision
Realm: TEST???.COM <http://xn--test-ooa2iub.COM>
 Domain [TEST???]:
 Server Role (dc, member, standalone) [dc]:
 DNS backend (SAMBA_INTERNAL, BIND9_FLATFILE, BIND9_DLZ, NONE)
[SAMBA_INTERNAL]:
 DNS forwarder IP address (write 'none' to disable forwarding)
[172.17.25.136]:
/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/domain.py:315:
GetPassWarning: Can not control echo on the terminal.
  adminpassplain = getpass("Administrator password: ")
Warning: Password input may be echoed.
Administrator password: admin444 at qnap
/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/domain.py:319:
GetPassWarning: Can not control echo on the terminal.
  adminpassverify = getpass("Retype password: ")
Warning: Password input may be echoed.
Retype password: admin444 at qnap
Out of memory in string_set_upper
ERROR(<class 'samba.provision.ProvisioningError'>): Provision
failed -
ProvisioningError: guess_names: Workgroup '' in smb.conf must match
chosen
domain 'TEST???'!  Please remove the /etc/config/smb.conf file and let
provision generate it
  File
"/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/domain.py",
line
398, in run
    use_rfc2307=use_rfc2307, skip_sysvolacl=False)
  File
"/usr/local/samba/lib/python2.7/site-packages/samba/provision/__init__.py",
line 1978, in provision
    sitename=sitename, rootdn=rootdn)
  File
"/usr/local/samba/lib/python2.7/site-packages/samba/provision/__init__.py",
line 609, in guess_names
    raise ProvisioningError("guess_names: Workgroup '%s' in
smb.conf must
match chosen domain '%s'!  Please remove the %s file and let provision
generate it" % (lp.get("workgroup").upper(), domain,
lp.configfile))

Does samba support IDN (Internationalized domain name) ?

Hywuoscar