What were you trying to do that didn't work?

Running xmlrpc tests for IPA, one of the tests is updating the allow-query for a dns zone and fails:

# ipa dnszone-add dnszone.test

# ipa dnszone-mod dnszone.test --allow-query '!198.18.2.0/24;any;'
ipa: ERROR: invalid 'allow_query': Unrecognized IPAddress flags value: 1

What is the impact of this issue to you?

Using any network address fails (format with IP/mask).

Please provide the package NVR for which the bug is seen:

python3-netaddr-0.10.1-5.el10.noarch
ipa-server-dns-4.12.2-1.el10.noarch

How reproducible is this bug?:

Always

Steps to reproduce

Install IPA server with DNS, add a zone, modify allow-query:

ipa-server-install --domain ipa.test --realm IPA.TEST --setup-dns --auto-forwarders -a Secret123 -p Secret123

echo Secret123 | kinit admin

ipa dnszone-add dnszone.test

ipa dnszone-mod dnszone.test --allow-query '!198.18.2.0/24;any;'

Expected results

Command should succeed

Actual results

The last command fails with:

# ipa dnszone-mod dnszone.test --allow-query '!198.18.2.0/24;any;'
ipa: ERROR: invalid 'allow_query': Unrecognized IPAddress flags value: 1