self = Str('idnsallowquery', _validate_bind_aci, attribute=True, autofill=False, cli_...aledir=None), multivalue=False, normalizer=_normalize_bind_aci, required=False)
value = '192.0.2/24;any;', index = None

    def _validate_scalar(self, value, index=None):
        if type(value) not in self.allowed_types:
            raise TypeError(
                TYPE_ERROR % (self.name, self.type, value, type(value))
            )
        if index is not None and type(index) is not int:
            raise TypeError(
                TYPE_ERROR % ('index', int, index, type(index))
            )
        for rule in self.all_rules:
            error = rule(ugettext, value)
            if error is not None:
                raise ValidationError(
                    name=self.get_param_name(),
                    value=value,
                    index=index,
                    error=error,
>                   rule=rule,
                )
E               ValidationError: invalid 'allow_query': cannot use IANA reserved IP address

/usr/lib/python2.7/site-packages/ipalib/parameters.py:856: ValidationError}}}

Tests on ipa-4-2 branch are failing due to problem described here. On pspacek's suggestion, I mark this ticket to triage again.