Solaris11 and samba4 dc

Simple question.
I have a solaris11 test machine
When i try to join a samba4 domain
give me this error

"kinit succeeded but ads_sasl_spnego_krb5_bind failed: invalid credentials"

When i join a w2003r2 AD..works perfect

I check network ok,dig,reverse ok..

my conf file is

[global]
        workgroup = DOMAIN
    realm = DOMAIN.LOCAL
    server string = ""
    netbios name = SOLARIS
        security = ads
        wins server = 192.168.0.9
        client NTLMv2 auth = yes
        kerberos method = secrets and keytab
        hosts allow = 192.168.0.0/24 127.0.0.1
        debug level = 10
        log file = /var/log/samba/%m.log
        max log size = 50
        log level = 1000
        syslog = 0
        utmp = Yes
        template shell = /usr/bin/bash
        template homedir = /export/home/%U
        winbind separator = /
        winbind enum users = yes
        winbind enum groups = yes
        winbind use default domain = yes
        encrypt passwords = yes
        invalid users = root
        socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        local master = no
        domain master = no
        dns proxy = no
        preserve case = yes
        short preserve case = no
        default case = lower
        case sensitive = no
        dos charset = cp850
        unix charset = iso8859-1
      map to guest = never
       restrict anonymous = 2
    hide dot files = yes
    server signing = yes
#winbind
idmap config * : range = 10000-20000
idmap config * : backend = tdb
idmap config DOMAIN : default = yes
idmap config DOMAIN : range = 10000-20000
idmap config DOMAIN : backend = rid

Anyone had succes with solaris11 and samba4?
Thanks in advance