• Open Menu Close Menu
  • Apple
  • Shopping Bag
  • Apple
  • Mac
  • iPad
  • iPhone
  • Watch
  • TV
  • Music
  • Support
  • Search apple.com
  • Shopping Bag

Lists

Open Menu Close Menu
  • Terms and Conditions
  • Lists hosted on this site
  • Email the Postmaster
  • Tips for posting to public mailing lists
Re: script for system Authentication dialog box.
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: script for system Authentication dialog box.


  • Subject: Re: script for system Authentication dialog box.
  • From: Christopher Nebel <email@hidden>
  • Date: Thu, 21 Jul 2005 09:45:39 -0700

On Jul 20, 2005, at 9:59 PM, John C. Welch wrote:

On 7/20/05 23:34, "Sander Tekelenburg" <email@hidden> wrote:

Authenticating (officially)
once gives you a five-minute window during which you will not need to
authenticate again. For instance, try this:


     set x to do shell script "whoami" with administrator privileges
     set y to do shell script "whoami" with administrator privileges
     {x, y}

Notice that you only have to type in your password once.

Indeed. Which is a surprise, given that I have set the gracetime to 0[*],
which *does* do what I expect it to do in Terminal.app. Why would AS ignore
the grace period?


[*] by having Defaults:ALL timestamp_timeout=0 in /etc/sudoers

IIRC, this is using the auth frameworks, not sudoers.

As of 10.4, yes, that's true. The grace period is still configurable, but in a different place; see the "system.privilege.admin" key in /etc/authorization. However, there's not as much need (at least to set it to zero), since the grace period applies for *precisely* the script that was authorized, unlike the old sudo-based implementation, which unlocked sudo everywhere in the system.



--Chris Nebel AppleScript and Automator Engineering

_______________________________________________
Do not post admin requests to the list. They will be ignored.
Applescript-users mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden


References: 
 >Re: script for system Authentication dialog box. (From: "John C. Welch" <email@hidden>)

  • Prev by Date: iSync crashing when invoked from AppleScript
  • Next by Date: Re: Q: Filenames... Truncation to 32chars. and Replacing TroublesomeText
  • Previous by thread: Re: script for system Authentication dialog box.
  • Next by thread: Re: script for system Authentication dialog box.
  • Index(es):
    • Date
    • Thread