Thanks all, i am getting closer to configure FreeIPA correctly. I install FreeIPA v2 on fresh installation. MIT Kerberos works fine and generated ticket.. see the attachment. Next i'll try to configure the client web browser to connect to IPA web ui because in IPA server httpd access_log it still throw error "POST /ipa/json HTTP/1.1" 401. Any reference? <div class="gmail_quote">On Thu, Jun 30, 2011 at 2:43 PM, Christian Horn <<a href="mailto:chorn@fluxcoil.net" target="_blank">chorn@fluxcoil.net</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> <div>On Thu, Jun 30, 2011 at 01:58:32PM +0700, Muhammad Naufal wrote: > Now it can authenticate against IPA server but no ticket generated when i > type klist in XP cmd prompt. > As a result i can not access IPA web ui. </div>IIRC there can multiple ticket caches be used there. Maybe the MIT windows kerberos tools show a bit more, found them quite helpful to debug windows kerberos auth. <a href="http://web.mit.edu/Kerberos/dist/index.html#kfw-3.2" target="_blank">http://web.mit.edu/Kerberos/dist/index.html#kfw-3.2</a> Christian </blockquote></div>