Interesting... yes, we do. This wasn't an issue when I posted here first, but since the Hosts page broke the CLI has followed:
[root@intauth-e ~]# ipa user-find --all ipa: INFO: trying https://intauth-e.domain.nz/ipa/json ipa: DEBUG: Created connection context.rpcclient_139931459505488 ipa: INFO: [try 1]: Forwarding 'schema' to json server 'https://intauth-e.domain.nz/ipa/json' ipa: DEBUG: New HTTP connection (intauth-e.domain.nz) ipa: DEBUG: HTTP connection destroyed (intauth-e.domain.nz) Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/ipalib/rpc.py", line 699, in single_request self.get_auth_info() File "/usr/lib/python2.7/site-packages/ipalib/rpc.py", line 651, in get_auth_info self._handle_exception(e, service=service) File "/usr/lib/python2.7/site-packages/ipalib/rpc.py", line 608, in _handle_exception raise errors.CCacheError() CCacheError: did not receive Kerberos credentials ipa: DEBUG: Destroyed connection context.rpcclient_139931459505488 ipa: ERROR: did not receive Kerberos credentials