[Freeipa-users] IPA, kerberos ticket issue for web admin.

[Rob Crittenden]

Nathan Lager wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> No, no proxy in place. Because this gui will be used primarily by
> people like Me (high privileged admin users), and flat-out blocked to
> everyone else, a proxy seemed like overkill.

Have you configured the browser for Kerberos? 
http://docs.fedoraproject.org/en-US//Fedora/15/html/FreeIPA_Guide/using-the-ui.html

That error seems to indicate that the domain isn't defined in 
network.negotiate-auth.trusted-uris

regards

rob