In https://github.com/freeipa/freeipa/blob/master/ipaserver/rpcserver.py#L646 a request is made for the session cookie on http instead of https. This is going to cause a redirect to the secure port. It would be more efficient to go to the secure port to begin with unless there is some subtle thing I'm missing.