10.9.2 Password reset su mode. Apps require old password for "login" keychain

0

So, I was playing around and decided to see if I could reset the password in single-user mode. I KNOW that I can more safely reset a user password using the recovery partition, being that this is 10.9.2, but I decided I wanted to see if I could do it in Single-User Mode if I needed to.

I did not run fsck first (because I've never really had to even on 10.5 or 10.6).

I did:

/sbin/mount -uw /

launchctl load /System/Library/LaunchDaemons/com.apple.opendirectoryd.plist

passwd username

  • So I reset the login password, which was successful.
  • Rebooted into UI
  • Logged into user account successfully
  • Finder asked me if I wanted to update the keychain, create a new keychain, or continue to login. I opted to create a new keychain, as that is what I always did in the past
  • Finder then constantly asked me for the password for the "login" keychain.
  • New password did not work, only the old password worked, strangely

As an experiment, I entered time machine, went back to yesterday (before I started messing around) and restored and replaced all items in /Users/username/Library/Keychains/ as well as /System/Library/LaunchDaemons/com.apple.opendirectoryd.plist then rebooted.

New password worked, I chose "Update keychain" at the prompt, then continued to finder. Same issue. Asked by many applications to provide the password for the login keychain. Only the old password worked. This kind of makes sense, because I'm using the old keychain files and old open directory plist.

I remedied (although maybe not totally) the issue by just changing the password using the recovery partition, then providing the old password for everything.

So I think my questions are:

1.) Where does the user or admin login password actually get stored, if not the login keychain or the open directory plist?

2.) Why would I need the old password for the login keychain if I've created a new keychain when prompted?

Just curious! Thanks!

nuclearsalt

Posted 2014-04-22T19:08:50.450

Reputation: 81

Your information is imcomplete...please provide the OS, OS version and the platform you are running on. It looks like an Apple to me but I am not a mindreader. – mdpc – 2014-04-22T19:33:04.467

@mdpc : It's tagged OSX-Mavericks and he stated it's 10.9.2. Given the nature of his question, however, it may be better suited in the Information Security forums. – Omegacron – 2014-04-22T20:41:29.967

...or in the Apple SE (don't know its name) – mdpc – 2014-04-22T21:11:52.440

Thanks for your responses, guys. I'm a total newbie here so feel free to point me in the right dir if need be ;)

As Omegacron stated, yes, MacOs X Mavericks (10.9.2). – nuclearsalt – 2014-04-22T23:39:25.623

Answers

0

Go to the "go menu" at the top of your screen, select "go to folder", type ~/Library/Keychains/ and hit Enter.

Then delete everything you see in that folder, reboot, recreate a new keychain if prompted.

NURV

Posted 2014-04-22T19:08:50.450

Reputation: 1