[Freeipa-users] WARNING: Using deny rules is deprecated, the option ipa_hbac_treat_deny_as will be removed in the next upstream version

[Jakub Hrozek]

On Tue, Feb 23, 2016 at 10:15:19AM +0100, Harald Dunkel wrote:
> Hi folks,
> 
> journalctl shows me a bazillion of Logfile entries:
> 
> Jan 12 20:02:04 host.example.com sssd[be[2362]: WARNING: Using deny rules is deprecated, the option ipa_hbac_treat_deny_as will be removed in the next upstream version
> 
> This makes about 10% of the whole log.
> 
> 
> What am I supposed to do to get rid of these messages?

ipa_hbac_treat_deny_as = ignore

should get rid of these (and any deny rules will be ignored as an
effect, but with a recent enough IPA server, there's no way to set them
either IIRC)