Description of problem:

# ipa config-mod --userobjectclasses="top, person, organizationalperson,
inetorgperson, inetuser, posixaccount, krbprincipalaux, krbticketpolicyaux,
ipaobject, ipasshuser, sambasamaccount"
ipa: ERROR: invalid 'ipauserobjectclasses': user default attribute sshpubkeyfp
would not be allowed!




Version-Release number of selected component (if applicable):
ipa-server-2.2.0-101.20120215T0856zgit578669d.el6.x86_64

How reproducible:


Steps to Reproduce:
1. attempt to add an additional user object class to ipa configuration (see
description)
2.
3.

Actual results:
ipa: ERROR: invalid 'ipauserobjectclasses': user default attribute sshpubkeyfp
would not be allowed!


Expected results:
object class added and any new user added would have attributes from this
objectclass available



Additional info: