CMS & ACS 3.0 please help

Question

I'm tryng to access CMS of a Cisco 3550 SMI IOS 12.1(11)EA1 with this aaa configuration:
aaa new-model
aaa authentication login login-pwd group tacacs+ enable
aaa authentication enable default group tacacs+ enable
aaa accounting exec accounting start-stop group tacacs+
aaa accounting commands 15 accounting start-stop group tacacs+
aaa accounting system default start-stop group tacacs+
tacacs-server host <A.B.C.D>
tacacs-server attempts 5
tacacs-server timeout 10
tacacs-server key <********>
line vty 0 4
accounting commands 15 accounting
accounting exec accounting
login authentication login-pwd
ip http server
ip http authentication aaa
If i use tacacs+ to access the switch via vty 0 4 i use the username and password (privilege level = 15) configured in ACS 3.0 with no problem (sh tacacs confirms this). But if use the same username and password (or the password only) to access the web console of the switch it doesn't work:
AUTHORIZATION REQUIRED
Browser not authentication capable or authentication failed.
The browser is ie 6.0 sp1 jre plug-in is 1.31, switch ip address is in trusted sites all java is enabled (everything is configured as reported in the document troubleshooting CMS).
If i remove aaa (no aaa new model) and set ip http authentication enable i can access the web console using the enable password with no problem (i also tried netscape 7.0 but with no results).
I do not use any proxy.
I'm getting crazy (very close to open a TAC)

Answer 1

I am having the exact same issue as described by mayer. 3750 series stack, running the latest release (upgraded to see if it resolved the issue, but it did not).
Release: c3750-ipservices-mz.122-44.SE.bin
When configured with aaa new-model and ip http authentication to local all works fine, but as soon as I set the ip http authentication to default list (which holds my tacacs and then local user) it prompts me a couple of hundred times for username/password.
I am aware that some releases require different configuration (some require the aaa config under vty lines, other under console). The release I am runing holds ip http v1.1 and should support the ip http authentication method. However, it fails.
Hope somebody found a solution.
Leo
ps. it is not for me, I prefer to use CLI, but I like to provide CDM access to some co-workers.