How to authenticate samba shares with ipa ?

[Diadormu ZMJ]

I want to authenticate the samba share user by ipa, but it failed

root@ubuntu:/var/log# smbclient //xxx.xxx.xxx.xxx/test -U ipatest -L
WARNING: The "syslog" option is deprecated
Enter ipatest's password: 
krb5_init_context failed (Invalid argument)
smb_krb5_context_init_basic failed (Invalid argument)
session setup failed: NT_STATUS_LOGON_FAILURE

Is there something wrong with my configuration file ?

root@ubutu:/var/log# cat /etc/samba/smb.conf
[global]
workgroup = WORKGROUP
server string = %h server (Samba, Ubuntu)
log file = /var/log/samba/log.%m
max log size = 1000
syslog = 0
panic action = /usr/share/samba/panic-action %d
server role = standalone server
security = user
passdb backend = ldapsam:ldap://freeipa.rnd.net
ldap admin dn = cn=Directory Manager
ldap suffix = cn=accounts,dc=rnd,dc=net
ldap user suffix = cn=users
ldap machine suffix = cn=computers
ldap group suffix = cn=groups
ldap passwd sync = yes
load printers = no
[test]
comment = test
path = /data/ipatest
available = yes
guest ok = no
valid users = ipatest
browseable = yes
public = yes
writable = yes
create mask = 0777
directory mask = 0777