Can you check your server game logs for the "kickid" rcon commands sent from the webpanel? It should be something like
Code:
kickid "[U:1:5124151]"
. Are you able to kick players that way through rcon?
I don't have a TF2 server, so those changes were untested.