Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SG6 almost bricked my mac! I figured out how to unbrick!

SG6 has a few issues still, it's a good product, especially free as in beer but under certain circumstacnes you can get locked out of your mac.  I had an issue where i could use the POA but the user login screen wouldn't appear, it just showed a textured mac background, no login window.  I had the right settings as far as I knew (yes I read the KB article on which login mode to use, it was set to use name and password, I tried both after fixing it and it can happen on both just most often with use name and password in the system logon preferences).  I didn't run into this problem until messing with all the settings repeatedly, if I only messed with it a few times I didn't run into this until I tried to simulate user abuse so take all this with a grain of salt.  SG6 for mac is good and simple to use. FYI you have to fix this with an automaited log on to be able to restore GUI logon access and reset the system. 

I figured out how to fix this, now because single user mode is a limited environment by design it’’’’s not going to have mounted kernel access and a lot of other stuff like USB automounting doesn't work.  Also your filesystem is in read only mode and you don't have access to the kernel so you can't turn POA on or off, only SSO.

Enter single user mode with command +s (you have to press this immediately after pressing the enter key, the time window to get this done with POA is SHORT! Only a few milliseconds)

Check the filesystem for errors and fix them (important if you have config issues of any kind while using volume encryption!):

Fsck –fy

Mount the root partition in read-write mode:

Mount –t update /

turn SSO off:

sgadmin --disable-sso

Determine the username and UID of the user you want to set autologin for

ls –n /users

This will display the user folders along with their username on the right, and the UID of the user which will be the second column of numbers, MAC like most unix systems starts the first UID at 501.

Once you have that you can use the defaults utility to overwrite the login window configurations with the expected username and UID like so:

/usr/bin/defaults write /Library/Preferences/com.apple.loginwindow autoLoginUser yourusername
/usr/bin/defaults write /Library/Preferences/com.apple.loginwindow autoLoginUID yourUIDnumber

REBOOT!

FYI depending on how badly mangled your loginwindow config is it may or may not work automatically and you may still get prompted for the password, you can reset these to the values you want in the system preferences GUI menu now.  This was tested and solved my problem on OS X 10.7

This will require more testing but if anyone runs into an issue that breaks the mac logon system this is the ONLY way to fix it in and it has to be in single user mode that I've found so far.  Backing up your kernel and authentication files with SG6 won't fix this.

:22911


This thread was automatically locked due to age.
Parents
  • Hello _JOEL_,


    first of all many thanks for your forum post regarding this and the detailed steps you have provided.

    If not already done, please would you open up a support case with all steps on how to replicate this issue.


    But I will also forward this internally.


    Regards,Tim

    :22931
Reply
  • Hello _JOEL_,


    first of all many thanks for your forum post regarding this and the detailed steps you have provided.

    If not already done, please would you open up a support case with all steps on how to replicate this issue.


    But I will also forward this internally.


    Regards,Tim

    :22931
Children
No Data