密码正确,无法登录、解锁、安装软件
管理员帐号,在系统设置里想解锁时,输入密码,不解锁,也没错误提示。安装软件,输入密码后也没反应。密码肯定正确,不正确对话框会晃。
登录为单用户,执行:
fsck -fy
mount -uw
rm /var/db/.AppleSetupDone
再重启,设置一新用户,设置登录时输入密码,则出现选择用户的界面,无论哪个用户,输入密码后都回到这页面来,不登录。密码是简单的密码,肯定正确。
再登录为单用户,再设一新用户,设置登录时不输入密码,则可登录进去,解锁或安装软件,输入密码仍无反应。
在解锁失败后,查看 /var/log/secure.log,有以下部分:
Nov 19 14:23:39 promote authorizationhost[200]: in pam_sm_authenticate(): Got user: tdxiong
Nov 19 14:23:39 promote authorizationhost[200]: in pam_sm_authenticate(): Got ruser: (null)
Nov 19 14:23:39 promote authorizationhost[200]: in pam_sm_authenticate(): Got service: authorization
Nov 19 14:23:39 promote authorizationhost[200]: in od_principal_for_user(): No authentication authority returned
Nov 19 14:23:39 promote authorizationhost[200]: in od_principal_for_user(): failed: 7
Nov 19 14:23:39 promote authorizationhost[200]: in pam_sm_authenticate(): Failed to determine Kerberos principal name.
Nov 19 14:23:39 promote authorizationhost[200]: in pam_sm_authenticate(): Done cleanup3
Nov 19 14:23:39 promote authorizationhost[200]: in pam_sm_authenticate(): Kerberos 5 refuses you
Nov 19 14:23:39 promote authorizationhost[200]: in pam_sm_authenticate(): pam_sm_authenticate: ntlm
Nov 19 14:23:39 promote authorizationhost[200]: in pam_sm_acct_mgmt(): OpenDirectory - Membership cache TTL set to 1800.
Nov 19 14:23:39 promote authorizationhost[200]: in od_record_check_pwpolicy(): retval: 0
Nov 19 14:23:39 promote authorizationhost[200]: in od_record_attribute_create_cfstring(): returned 2 attributes for dsAttrTypeStandard:AuthenticationAuthority
Nov 19 14:23:39 promote authorizationhost[200]: in pam_sm_setcred(): Establishing credentials
Nov 19 14:23:39 promote authorizationhost[200]: in pam_sm_setcred(): Got user: tdxiong
Nov 19 14:23:39 promote authorizationhost[200]: in pam_sm_setcred(): Context initialised
Nov 19 14:23:39 promote authorizationhost[200]: in pam_sm_setcred(): Got euid, egid: 0 0
Nov 19 14:23:39 promote authorizationhost[200]: in pam_sm_setcred(): Done getpwnam()
Nov 19 14:23:39 promote authorizationhost[200]: in pam_sm_setcred(): Done setegid() & seteuid()
Nov 19 14:23:39 promote authorizationhost[200]: in pam_sm_setcred(): pam_sm_setcred: krb5 user tdxiong doesn't have a principal
Nov 19 14:23:39 promote authorizationhost[200]: in pam_sm_setcred(): Done cleanup3
Nov 19 14:23:39 promote authorizationhost[200]: in pam_sm_setcred(): Done seteuid() & setegid()
Nov 19 14:23:39 promote authorizationhost[200]: in pam_sm_setcred(): Done cleanup4
Nov 19 14:23:39 promote authorizationhost[200]: in pam_sm_setcred(): pam_sm_setcred: ntlm
Nov 19 14:23:39 promote authorizationhost[200]: in pam_sm_setcred(): pam_sm_setcred: no domain found skipping
Nov 19 14:23:39 promote com.apple.SecurityServer[29]: UID 503 authenticated as user tdxiong (UID 503) for right 'system.preferences.accounts'
按Kerberos 5 refuses you搜网上,找到一类似问题,进行以下操作:
sudo rm -fr /var/db/krb5kdc /etc/krb5.keytab /Library/Keychains/System.keychain
sudo /usr/libexec/configureLocalKDC
再重启,问题照旧。
可有人知道解决方案吗?