Feature request: Reset Local Items Keychain about adpassmon

[macmule]

T-Short, do you manage keychains via ADPM too?

I'm thinking of maybe adding a "Check Keychain" item to the drop down if enabled

[T-Short]

Hm, no, I've only used it in one instance so far and that's where the Local Items issue popped up.

[macmule]

Ok. The local items keychain lock state is not accessible via the "security" command.

I'll look at googles Keychain Minder & see if there is something pinchable.

Regards,

Ben.

On 24 Nov 2015, at 07:49, T-Short [email protected] wrote:

Hm, no, I've only used it in one instance so far and that's where the Local Items issue popped up.

—
Reply to this email directly or view it on GitHub.

[macmule]

Pulled from 2.20.11 to investigate: https://github.com/google/macops/tree/master/keychainminder#how-it-works

Specifically: https://github.com/google/macops/blob/master/keychainminder/Common/Common.m#L70

[macmule]

Repo has been moved: https://github.com/google/macops-keychainminder/blob/c694904ed1ec37221c3d3450f831dd2ba1e753f3/KeychainMinderGUI/PasswordKnownView.m#L21

[apizz]

I know our environment would benefit from a "Check Keychain" in the menubar in ADPM.

Along the same lines, when I tested changing a password a couple months ago (10.11.5) at first login on another machine where the same user was logged in it presented the ADPM keychain prompt. Now for whatever reason it's not bringing up the prompt anymore. Have disabled the OSX keychain sync pref and the ADPM user pref has enableKeychainLockCheck enabled (bool true).

Wondering if it could the account I'm using, as the test account is set to never expire but the password can be changed ... Running the latest version - 2.20.19

[apizz]

I can confirm that choosing "Refresh Kerberos ticket" brings up the Keychain prompt and will successfully update the Keychain pass, but for whatever reason it doesn't display the Keychain prompt at login if the keychain is out of sync with the user's new AD pass.

[macmule]

Hi folks,

ADPassmon is no longer maintained, please use NoMAD.

As such, i'm closing this off.