DMcCoy Posted March 11, 2009 Posted March 11, 2009 I don't understand, when we have had the problems with the keychain, I allowed the keychain utility in WGM and unlocked, but I've had to use the first admin password, not the first user password. We set all the passwords to the same thing and prompted the users to change the password on login. However not all users have the problem. There are several different keychains. In keychain utility: login System System Roots The login keychain resides in each users Library folder, and is for individual users. To unlock this keychain it should be the the current logged in users password. Unlocking the system keychain will require the password for the first admin account on the machine, it may be an old password as it doesn't get synchronised with the password changes afaik. Users will never need the system keychain to be unlocked. When users first login they will not have a personal login keychain and it will be created with the current login password, should a user change their password or an expire force a change then when logging in the password will be updated on the login keychain. Should a user forget their password and it is reset by an admin then when logging in the keychain cannot be opened (as it no longer matches the current password) so doesn't get updated with the new password and remains locked - this is where odd things like not being able to save internet and other passwords happens. All the keychain minder is doing is noting when the keychain is not unlocked at login and asking the user to either update the password (requiring the old password is impossible if they forgot) or deleting their login keychain file and creating a new one. 3
rolfea Posted March 11, 2009 Posted March 11, 2009 I understand now, thanks DMcCoy I'll try the Keychain Minder out and see if it helps with some of the problems we are having here.
DMcCoy Posted March 11, 2009 Posted March 11, 2009 anyone got a keychain minder download link ? AFP548 - Keychain Minder 1.5
rolfea Posted March 11, 2009 Posted March 11, 2009 Just tried the Keychain Minder. So far so good! Only tried it on one machine on one user for now but it is looking good.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now