The "Configuring Windows as an IPA Client" (http://freeipa.org/page/ConfiguringWindowsClients) article states: "5. Select Download from web path, and enter the following URL: http://<your IPA server's fully-qualified domain name>/config/" But it seems that the URL is actually "http://<your IPA server's fully-qualified domain name>/ipa/config/".
Fixed.
Fix Verified: Section 7.1 Client Configuration Guide and http://freeipa.org/page/ConfiguringWindowsClients
Verified in comment #2. Closing bug :)