Re: [Fed-Talk] profiles and local accounts
Re: [Fed-Talk] profiles and local accounts
- Subject: Re: [Fed-Talk] profiles and local accounts
- From: "Koch, Ekkehard" <email@hidden>
- Date: Wed, 01 Apr 2015 16:49:03 +0000
- Thread-topic: [Fed-Talk] profiles and local accounts
Yes we have seen this. Looks like a bug in OS X Yosemite. We did file a bug and others have as well.
--
Have A Super Fantastic Day!!
Ekkehard Koch
P.S.: If I can help you in any way business or beyond. Just let me know!
************************************************************************
CONFIDENTIALITY NOTICE: This E-mail (including attachments) is covered by the Electronic Communications Privacy Act, 18 U.S.C. 2210-2521, is confidential and may be legally privileged. This E-mail contains information that is private, confidential, or is protected by the attorney-client work product doctrines, and is intended only for the use of the individual(s) named herein. If you are not the intended recipient, be advised that unauthorized use, disclosure, copying, distribution, or the taking of any action in reliance on this information is strictly prohibited. If you have received this E-mail in error, please immediately notify the sender by replying to this E-mail, and delete the original message and any attachments. Thank you.
> On Mar 31, 2015, at 11:46, Bell, Ian F CTR NAWCAD, 7.2.4 <email@hidden> wrote:
>
> With pwpolicy they have added two new commands setaccountpolicies, and getaccountpolicies I have found no documentation from Apple but the 10.10 STIGS at least provides something to work with.
>
> Ian
>
> -----Original Message-----
> From: Valentine, Ruth Ann B. [mailto:email@hidden]
> Sent: Tuesday, March 31, 2015 12:38 PM
> To: Bell, Ian F CTR NAWCAD, 7.2.4; email@hidden
> Subject: Re: [Fed-Talk] profiles and local accounts
>
> I have this issue. It asked me to change during the update, and I found an answer that specifically spelled out:
>
> Special char, some letters, some numbers
>
> Since this does not fit into my password algorithm, I tried to change it to something I could remember better, and no dice.
>
> Under the covers in Yosemite, the password server had totally changed. I am still trying to figure it out as I will soon be upgrading some classified machines and will have very specific password requirements that need to be applied.
>
> When I have some spare time, I plan to investigate further and will report back when I know more.
>
> Of course, if anyone else has cracked this nut please let me know.
> Pwpolicy is now depracated, and, even though I can read the policies as they are stored using dscl, I cannot seem to get the right magic to change the policy.
>
> Ruth Ann
> The MITRE Corp.
> 781-271-2386
> email@hidden
>
> On 3/31/15, 11:43 AM, "Bell, Ian F CTR NAWCAD, 7.2.4"
> <email@hidden> wrote:
>
>> Has anyone else seen an issue with 10.10 and local accounts where you
>> apply a profile to a device and attempt to change the password on that
>> local account you are unable to unless you remove the profile. No
>> matter how complex or long I set the password beyond the requirements
>> it comes back telling me that the password does not meet requirements.
>>
>> Ian F Bell, Systems Administrator
>> Macintosh/Mobile administration
>> (301) 757-5908
>> Information Technology/Information Management, code 7.2.4 Naval Air
>> Warfare Center, Aircraft Division (NAWCAD) Naval Air Systems Command
>> (NAVAIR) Department of the Navy (DON)
>>
>>
>
> _______________________________________________
> Do not post admin requests to the list. They will be ignored.
> Fed-talk mailing list (email@hidden)
> Help/Unsubscribe/Update your Subscription:
>
> This email sent to email@hidden
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden