Password self-service on OSX (ask to community)

Question

Hi All,
Did some find solution for OSX and Adaxes to manage password in keychain?
In our orgnisation we have an about 200 macs and we face with such problem: users change their password using web service, so in keychain is still old password. Do you have any ideas how to solve this issue?

Comments

Are these macs bound to AD?

If you're not requiring passwords to change via website, 10.9+ changes AD passwords fairly well.

You could check out this app: https://macmule.com/2014/04/01/announci ... n-v2-fork/

---

Yes, all macs in our company are bound to AD.
The main reason is that when someone has changed AD password using website this password still isn't updated in the keychain :(

Answer 1

The only way to make sure the keychain updates is to either log off from the Mac and perform the reset from another computer or immediately restart (log off and back on) to update the password.

You will need to make sure the sync login keychain password with account is check in the First Aid tab of Keychain Access preferences. This is checked by default.

However, the Local Items keychain breaks all the time. Here's how to fix: https://support.apple.com/en-us/HT203897