I'm trying to remove an auto login to a dead share but it won't let me do it, any suggestions? There is an exclamation warning after the name of the server in my Users & Groups > Login Items in my preferences:
MacOS – Remove auto login to a dead server OS X
macos
Related Solutions
Yes. If you enable automatic login, the keychain password is stored in /etc/kcpassword using XOR cipher, which can be decoded easily. You need root privileges to read it though.
sudo ruby -e 'key = [125, 137, 82, 35, 210, 188, 221, 234, 163, 185, 31]; IO.read("/etc/kcpassword").bytes.each_with_index { |b, i| break if key.include?(b); print [b ^ key[i % key.size]].pack("U*") }'
Even if automatic login was disabled, the login password can be reset in single user mode. It doesn't change the password of the login keychain though. If someone logged in to your account after resetting the login password, they could access most of your files normally, but they couldn't log in on your account in Mail or use auto-fill in Safari. If automatic login was enabled, they could see your passwords with something like security find-internet-password -s accounts.google.com -w and use Mail and auto-fill.
There was a vulnerability when automatic login was enabled:
According to a leading password recovery software developer Passware, your password could be easily accessed via the direct memory access associated with the Mac’s FireWire port.
It seems that by enabling the “automatic login” feature the FireWire port on your Mac opens the door to unauthorized password recovery. It seems that this is an issue that has plagued Snow Leopard as well, but as it stands it does not look like there is any fix for it, apart from disabling “automatic login” and spending that extra second or two typing in your password.
The hash of the login password (which is usually also the password of the login keychain) is stored in /private/var/db/dslocal/nodes/Default/users/username.plist in 10.7 and 10.8. In 10.7 even relatively complex passwords could be cracked with DaveGrohl, but 10.8 switched to PBKDF2, which limits it to about 10 guesses per second per core.
Mac OS X 10.7 and 10.8 include a built-in VNC server. This server will likely work better than the VINE edition while viewing the Login Window.
You can enable the built-in VNC server through the System Preferences > Sharing settings.
Related Question
- MacOS – Login shows “network accounts unavailable” but I can access server once local user logs in
- MacOS – how to change NFS share name as displayed in OSX without reconfiguring NFS server
- MacOS – How to disable that “Guest User” from appearing at the OS X 10.8.5 login screen
- MacOS – Mounting a Network share on login (There was a problem connecting to this server)
- macOS – Stopping Apps Like Spotify from Auto Starting in High Sierra
- MacOS – Prevent app re-adding itself to “open on login” list
Best Answer
If it's greyed out then it means it's defined by the administrator (either MCX or profiles). Look in System Information under either Managed Client or Profiles to see where it's coming from.