[Freeipa-users] How to authenticate samba shares with ipa ?

I want to authenticate the samba share user by ipa, but it failed root@ubuntu:/var/log# smbclient //xxx.xxx.xxx.xxx/test -U ipatest -L WARNING: The "syslog" option is deprecated Enter ipatest's password: krb5_init_context failed (Invalid argument) smb_krb5_context_init_basic failed (Invalid argument) session setup failed: NT_STATUS_LOGON_FAILURE Is there something wrong with my configuration file ? root@ubutu:/var/log# cat /etc/samba/smb.conf [global] workgroup = WORKGROUP server string = %h server (Samba, Ubuntu) log file = /var/log/samba/log.%m max log size = 1000 syslog = 0 panic action = /usr/share/samba/panic-action %d server role = standalone server security = user passdb backend = ldapsam:ldap://freeipa.rnd.net ldap admin dn = cn=Directory Manager ldap suffix = cn=accounts,dc=rnd,dc=net ldap user suffix = cn=users ldap machine suffix = cn=computers ldap group suffix = cn=groups ldap passwd sync = yes load printers = no [test] comment = test path = /data/ipatest available = yes guest ok = no valid users = ipatest browseable = yes public = yes writable = yes create mask = 0777 directory mask = 0777