search

joshua-d-miller / macOSLAPS

Swift binary that will change a local administrator password to a random generated password. Similar behavior to LAPS for Windows
MIT License
383 stars 57 forks source link

...or the domain controller is not writable #24

Closed betorivas closed 5 years ago

betorivas commented 5 years ago

Hi Joshua,

We are getting this error when macoslaps runs, and I think is because the offices our Macs are located in all have Read Only Domain controllers, is there a way to specify which domain controller to use?

Thanks.

joshua-d-miller commented 5 years ago

Hi @betorivas,

I was wondering if you could set the preferred domain server in your AD Settings manually and see if that resolves the issue? I'm currently exploring setting this option temporarily when launching macOSLAPS.

Thanks!

joshua-d-miller commented 5 years ago

@betorivas Please try the attached prebuild of macOSLAPS and specify a DC as a string under the PreferrredDC key. Let me know if it works.

betorivas commented 5 years ago

Thank you very much!

Will try tomorrow and reply back right away!

On Tue, Dec 4, 2018 at 12:55 PM Joshua D. Miller notifications@github.com wrote:

@betorivas https://github.com/betorivas Please try the attached prebuild of macOSLAPS and specify a DC as a string under the PreferrredDC key. Let me know if it works. macOSLAPS.zip https://github.com/joshua-d-miller/macOSLAPS/files/2645001/macOSLAPS.zip

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/joshua-d-miller/macOSLAPS/issues/24#issuecomment-444173325, or mute the thread https://github.com/notifications/unsubscribe-auth/ArSrcebmZSe-bo0wVyXvNigsW6GoYamxks5u1qj2gaJpZM4Y1kn2 .

betorivas commented 5 years ago

just tried running it and it only says "Killed: 9", with our without the new key. I even tested PreferrredDC and PreferredDC in case the key had an extra R typo.

On Tue, Dec 4, 2018 at 6:22 PM Jose Alberto Rivas betorivasf@gmail.com wrote:

Thank you very much!

Will try tomorrow and reply back right away!

On Tue, Dec 4, 2018 at 12:55 PM Joshua D. Miller notifications@github.com wrote:

@betorivas https://github.com/betorivas Please try the attached prebuild of macOSLAPS and specify a DC as a string under the PreferrredDC key. Let me know if it works. macOSLAPS.zip https://github.com/joshua-d-miller/macOSLAPS/files/2645001/macOSLAPS.zip

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/joshua-d-miller/macOSLAPS/issues/24#issuecomment-444173325, or mute the thread https://github.com/notifications/unsubscribe-auth/ArSrcebmZSe-bo0wVyXvNigsW6GoYamxks5u1qj2gaJpZM4Y1kn2 .

joshua-d-miller commented 5 years ago

So it just crashed? Did you type in the FQDN of the writable domain controller? I just tested with my FQDN controlelr and it seemed to work. Key is PreferredDC and the value should be a string so servername.domain.local

betorivas commented 5 years ago

Yup, FQDN. Not sure if I "installed" correctly, since I simply replaced the old binary with this new one and edited the plist.

On Thu, Dec 6, 2018 at 5:36 PM Joshua D. Miller notifications@github.com wrote:

So it just crashed? Did you type in the FQDN of the writable domain controller?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/joshua-d-miller/macOSLAPS/issues/24#issuecomment-445038326, or mute the thread https://github.com/notifications/unsubscribe-auth/ArSrceq6c7z2_C0LN-FpRMpAVqL1kRIuks5u2Y3vgaJpZM4Y1kn2 .

joshua-d-miller commented 5 years ago

Try this file attachment macOSLAPS.zip and hopefully you have better luck. If you don't can you send me a log of the output if any?

joshua-d-miller commented 5 years ago

@betorivas Please try the latest build and specify the PreferredDC key and let me know if it works for you.

betorivas commented 5 years ago

Thanks will do!

On Fri, Feb 1, 2019 at 10:25 AM Joshua D. Miller notifications@github.com wrote:

@betorivas https://github.com/betorivas Please try the latest build and specify the PreferredDC key and let me know if it works for you.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/joshua-d-miller/macOSLAPS/issues/24#issuecomment-459739025, or mute the thread https://github.com/notifications/unsubscribe-auth/ArSrcW82Xj2yh2FyxeuBxJJgkrziJu6pks5vJE5WgaJpZM4Y1kn2 .

joshua-d-miller commented 5 years ago

@betorivas The latest build has a fix as it was determined that on a newly bound machine the date would be invalid so our check to see if the DC is writable would always fail. I have gone ahead and updated this so please try the new build and let me know!

joshua-d-miller commented 5 years ago

I am going to call this issue resolved as well as we determined a newly bound machine would have an invalid date and would always fail the date set so this has been corrected.

betorivas commented 5 years ago

Sorry I didnt reply before. It works perfectly!

On Wed, Mar 6, 2019 at 10:29 AM Joshua D. Miller notifications@github.com wrote:

Closed #24 https://github.com/joshua-d-miller/macOSLAPS/issues/24.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/joshua-d-miller/macOSLAPS/issues/24#event-2184479315, or mute the thread https://github.com/notifications/unsubscribe-auth/ArSrcUZLIOweHuxiIG6J4m19xoYrEVb0ks5vT96-gaJpZM4Y1kn2 .