[Freeipa-users] FreeIPA Client Install 403 error

[Rubin Binder]

Hello all, 

I am testing Free IPA server for use under a test environment, so far smooth sailing and have it up and running, no problems. 

The problem is occurring during client installation. I have installed the ipa-client package on a clean CentOS 7 OS. When I execute ipa-client-install... I get the following: 

 Client hostname: centostest.mydomain.com 
 Realm: MYDOMAIN.COM 
 DNS Domain: mydomain.com 
 IPA Server: ldap.mydomain.com 
 BaseDN: dc=mydomain,dc=com 

 Continue to configure the system with these values? [no]: yes 
 Skipping synchronizing time with NTP server. 
 User authorized to enroll computers: admin 
 Password for admin at MYDOMAIN.COM: 
 Successfully retrieved CA cert 
 Subject: CN=Certificate Authority,O=MYDOMAIN.COM 
 Issuer: CN=Certificate Authority,O=MYDOMAIN.COM 
 Valid From: Wed Jul 13 13:12:08 2016 UTC 
 Valid Until: Sun Jul 13 13:12:08 2036 UTC 

 Joining realm failed: HTTP response code is 403, not 200 

 Installation failed. Rolling back changes. 
 IPA client is not configured on this system. 

I can't make sense of why I'd be seeing a 403 error.  I've done my share of searching but have not found a similar issue.  Some have report 401 errors in some circumstances, but not 403.

Has anyone seen this before.

Thanks,
Rubin