Comments (9)
So the best thing to do in this situation is to use the defaults command when writing values to a PLIST. That way you do not have to kill cfprefsd in order for your changes to take effect. The other thing to do that would be most efficient would be to make a configuration profile by either using an MDM or Tim Sutton's project mcxToProfile. Hopefully, this will fix your issue as well @MaLJuK as you stated you were editing a PLIST file and then placing it in /Library/Preferences
from macoslaps.
Update:
When I build and run I am receiving Unable to connect to local directory or change password.
Before that there is: The local admin: <here_is_my_local_admin_account_name> has been detected to have a secureToken. Preforming secure password change...
However once I was successful and it almost worked. Password changed at AD but not in macOS.
I partially figured it out. It seems that first time password was changed locally after all (it wasn't accepted in macOs GUI). When I typed password AD received in FirstPass variable, it went through. Password was changed locally and in AD. Still receiving some errors but works. Now I am trying to make it run in background.
from macoslaps.
@majluk Have you tried downloading the pkg install under releases and then using a configuration profile to run the app instead of building it in Xcode?
from macoslaps.
Hello @joshua-d-miller
Thanks for reply.
I wasn't using configuration profile. What I did was:
- Download and instal pkg from releases
- Modify edu.psu.macoslaps.plist file and put it into /Library/Preferences
- Run sudo macOSLAPS from Terminal
edu.psu.macoslaps.plist is getting delete after I run sudo macOSLAPS
from macoslaps.
We're seeing the same issue on one particular computer. The computer is using the same image as the rest of our systems. It would be nice if there were more debug logging in this particular section to know exactly where the break is occurring. Will be putting Xcode on this one and editing and debugging the code to get more verbose logging out of the executable. For now, this is the only logging we're getting, which is a bit vague:
Info|Thu May 02, 2019 09:13:39 AM|macOSLAPS|No Preferred Domain Controller Specified. Continuing...
Warning|Thu May 02, 2019 09:13:39 AM|macOSLAPS|There has never been a random password generated for this device. Setting a default expiration date of 01/01/2001 in Active Directory to force a password change...
Info|Thu May 02, 2019 09:13:39 AM|macOSLAPS|Password Change is required as the LAPS password for %admin%, has expired
Info|Thu May 02, 2019 09:13:39 AM|macOSLAPS|The local admin: %admin% has been detected to have a secureToken. Performing secure password change...
Error|Thu May 02, 2019 09:13:39 AM|macOSLAPS|Unable to connect to local directory or change password. Exiting...
I would like to see debug or verbose logging available.
from macoslaps.
Fixed it on our end. After adding a ton of debug logs to the code, realized the changes to the PList file were not getting read. I was convinced there was a second PList file somewhere, but it turns on PList caching was getting in our way. Here's what fixed it for us:
sudo killall cfprefsd
Doing that fixed the issue and all the debugging message started reporting information from the updated PList; a reboot should also fix.
Maybe there's a more elegant way to force the process to refresh the PList file ... ?
Refs:
- https://hints.macworld.com/article.php?story=20130908042828630
- https://eclecticlight.co/2017/07/09/last-week-on-my-mac-making-a-mess-of-preferences/
from macoslaps.
Thank you for informations. I will try to fix it when find some time.
from macoslaps.
Worked for me.
I edited settings file one more time, paste it to its location, load edu.psu.macoslaps-check.plist to Launch Deamon but on a different laptop and it's changing. Maybe there was something wrong with previous machine?
Thanks for help.
from macoslaps.
@majluk Sure thing. I'll go ahead and resolve this issue.
from macoslaps.
Related Issues (20)
- Setup HOT 2
- Migrating to Jamf LAPS HOT 3
- "Failed to parse the account's LAPS data" HOT 2
- Retrieving the password with a custom attribute script in version 4.0.0 HOT 1
- security does not have access to view keychain for LAPS password HOT 5
- Unable to unlock Filevault with LAPS Admin HOT 1
- Unable to trigger firstpass after install
- macOSLAPS 3.0.2.776 on macOS 12.6.1 - Could not cast value of type 'NSTaggedPointerString' to 'NSNumber' HOT 4
- Version shows as 3.0.2 instead of 3.0.3 Build 778 HOT 2
- Add "Initial roll" flag HOT 2
- Case-insensitive command line flags HOT 2
- Version Extension Attribute HOT 6
- Configuration Profile Set to "Local" but macosLAPS thinks it is bound to AD HOT 5
- Password Reset Function Cannot Find a Password that Meets Requirements HOT 5
- Suggestion: Native Password Verification HOT 3
- LAPS for Azure AD HOT 1
- Initial Password Reset with Secure Token Not Working HOT 9
- MDM storage of LAPS password? HOT 3
- macOSLAPS on Intune HOT 1
- Comprehensive directions HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from macoslaps.