[Casper] casper to delete "login" keychains emmass
Clinton Blackmore
clinton.blackmore at westwind.ab.ca
Thu Apr 2 07:15:36 PDT 2009
There is a command called "security" that I've bumped into that
modifies keychains; an answer may lie within it.
The PyMacAdmin project is also working on a tool to work with
Keychains; the source appears to be at http://code.google.com/p/pymacadmin/source/browse/trunk/lib/PyMacAdmin/Security/Keychain.py
. The project is still in its early stages.
Cheers,
Clinton Blackmore
On 2-Apr-09, at 8:03 AM, Miles Leacy wrote:
> A logout policy will do the same thing, you'll just need to use the
> explicit paths rather than the relative ones.
>
>
>
>
>
> 2009/4/2 Eric Young <eyoung at thayer.org>
> Rats now I need to dig into logout hooks.... the simplest answers
> always lead to more reading :-)
>
>
>
>
> --------------------------------------------------------------------------------------------
> I must not fear. Fear is the mind-killer.
> Fear is the little-death that brings total obliteration.
> I will face my fear. I will permit it to pass over me and through me.
> And when it has gone past I will turn the inner eye to see its path.
> Where the fear has gone there will be nothing.
> Only I will remain.
> --Bene Gesserit Litany (Frank Herbert)
> --------------------------------------------------------------------------
> Eric Young
> eyoung at thayer.org
>
>
>
> On Apr 2, 2009, at 8:49 AM, Criss Myers wrote:
>
>> Hi
>>
>> Yes i use a logout.hook to delete the keychain, this solves the
>> problem,
>>
>> The login keychain is unlocked at login so if the user changes the
>> password after login this has no effect on the keychain, then
>> delete the keychain at logout so that next time the user logs in a
>> new chain is created with their new password,
>>
>> add this to your logout hook
>>
>> ################################
>>
>> #Delete the Users Keychain
>>
>> echo Removing keychain
>>
>> rm ~/Library/Keychains/login.keychain
>>
>>
>> #record this will a log file
>>
>> touch ~/Library/Login/Reset.rft
>>
>> echo "Done"
>>
>>
>> Criss Myers
>> Senior Customer Support Analyst (Mac Services)
>> Apple Certified Technical Coordinator v10.5
>> LIS Business Support Team
>> Library 301
>> University of Central Lancashire
>> Preston PR1 2HE
>> Ex 5054
>> 01772 895054
>>
>
>
> _______________________________________________
> Casper mailing list
> Casper at list.jamfsoftware.com
> http://list.jamfsoftware.com/mailman/listinfo/casper
>
>
> _______________________________________________
> Casper mailing list
> Casper at list.jamfsoftware.com
> http://list.jamfsoftware.com/mailman/listinfo/casper
This email has been scanned by Barracuda Network's Anti-Virus and Spam Firewall.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20090402/47997cc8/attachment.html
More information about the Casper
mailing list