Thanks rob, yes the config krbrealm.con is exist. I didn't use proxy for freeipa connection. I bypass proxy server for local addresses via ie internet options. But the mit kerberos installation still failed. HTTP/1.0 504 Gateway Time-out. Has anyone tried win xp as an ipa client? <div class="gmail_quote">On Mon, Jun 27, 2011 at 10:24 PM, Rob Crittenden <<a href="mailto:rcritten@redhat.com">rcritten@redhat.com</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">Muhammad Naufal wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> *I have read the documentation here<div><div></div><div class="h5"> <a href="http://docs.fedoraproject.org/en-US/Fedora/15/html/FreeIPA_Guide/Using_Microsoft_Windows.html" target="_blank">http://docs.fedoraproject.org/en-US/Fedora/15/html/FreeIPA_Guide/Using_Microsoft_Windows.html</a> But i'm stuck in instruction number 5. * *5. *Select *Download from web path*, and enter the following URL: http://<your FreeIPA server's fully-qualified domain name>/ipa/config/ I've got error when downloading the config it says: *Download failed HTTP/1.0 504 Gateway Time-out* Then i go to my freeipa server config url <a href="http://freeipa.local/ipa/config/" target="_blank">http://freeipa.local/ipa/config/</a> and it say *Forbidden. You don't have permission to access /ipa/config/ on this server.* How to install MIT Kerberos in microsoft windows xp correctly? How should my configuration on the freeipa server? Thanks for any assistance provided. again. </div></div></blockquote> Are you using a proxy server? I wonder if the proxy can get to the IPA installation. Directory indexing is disabled on the directory so you can't browse the files. You can confirm they exist by trying: <a href="http://freeipa.local/ipa/config/krbrealm.con" target="_blank">http://freeipa.local/ipa/config/krbrealm.con</a> rob </blockquote></div>