How does sudo remember you already entered root's password?

Peculiar password problem

  • The OS X GUI—but only the GUI—has stopped accepting my password. Any password. I have a late-2009 iMac running OS X 10.9.2. The other night, I tried to install something that asked for my administrator password. When I entered it, the dialog box did the little “nope, wrong password” wiggle. This was a sudden development: I’d entered that password without incident several times that day. I tried again a few times and got the same response, so I shrugged, saved my files, and restarted the computer. When the flat grey login screen came up, it wouldn’t accept my password either. After three failed attempts, it offered to let me use my Apple ID to reset the password. That seemed to work, but when it tried to use my newly-reset password to automatically log in, it was rejected again. I reset it again, to a completely different password. Same problem. Here’s where it gets weird. I put the Mac into console mode (username >console, blank password) and tried to log in that way—and it worked! I tried to SSH in from my laptop. That worked too. And sudo accepted my password just fine. But when I exited to the GUI login screen, I was back to password non grata. While I know it’s best practice to have a separate admin account, I’m ashamed to say I don’t have any other users set up on this computer, so I can’t test whether this problem is limited to my account. I’d call myself an intermediate nerd: I’m comfortable at the command line, and I can write a mean shell script. But I don’t even know where to begin troubleshooting this. Thanks in advance for your help!

  • Answer:

    Watch your language!. I mean did you at one point accidentally change the language setting of the keyboard? That could mess with keyboard layout. Some preboot authorization programs ( Like PGP) won't work until the keyboard is set to match the layout/language of the original password.

Zozo at Ask.Metafilter.Com Visit the source

Was this solution helpful to you?

Other answers

Do you have a USB or bluetooth keyboard you can use to attempt login? My first thought is a faulty key. (SHIFT or if there's a letter that's in the passwords you're using but not your username..?)

carsonb

Maybe http://support.apple.com/kb/ht1379 is worth a try?

thelonius

My first thought was caps lock or number lock was on or off, whichever one you don't expect it to be.

rabbitrabbit

If you can get to the console, and sudo works, then can you https://apple.stackexchange.com/questions/82472/what-steps-are-needed-to-create-a-new-user-from-the-command-line-on-mountain-lio and test the GUI with that new user?

jozxyqk

We once had a somewhat similar problem to this at my office. It turned out that the person had previously paired a wireless keyboard to his machine, but wasn't using it any more. The keyboard was sitting in a corner on someone else's desk. Somehow it got turned on, and it was still in range, so it connected to the original user's computer. It had a bunch of junk piled on it, which caused it to constantly send a stream of spaces, which was very baffling until we figured out what was happening. I could see a similar thing happening with shift or caps lock, which would be less immediately visible, but could cause problems like this.

primethyme

Never seen this on the particular issue, but keychain first aid? Although I think that might need the admin password...

mhz

There is no wireless keyboard connected to this computer. I used the same USB keyboard to (successfully) enter my password at the command line as I did to (unsuccessfully) enter it in the GUI. Apple keyboards don't have a Num Lock key, and yes, I made sure Caps Lock was off. I'll try creating a new user and see if that works.

Zozo

when it tried to use my newly-reset password to automatically log in, it was rejected again Perhaps the system and/or login components of your Keychain are corrupt? If there's any way to get to the GUI via another account, you might first give Apple's http://support.apple.com/kb/ph7296 a try, via the Keychain Access utility. If you have a backup and can get to root via CLI, you could also run the command-line equivalent to list keychains, e.g.: $ security list-keychains "/Users/foo/Library/Keychains/login.keychain" "/Users/foo/Library/Keychains/Microsoft_Intermediate_Certificates" "/Library/Keychains/System.keychain" You could rename the login.keychain, then do touch /Users/.../login.keychain to create an empty file. Then try logging in to your old account again, in order to repopulate a fresh login.keychain. If this fails, because you renamed the original file, you can cp it back to its original location. You might also wipe the System.keychain file. To create a fresh System.keychain you could use /usr/sbin/systemkeychain -C -f when logged in as root. I don't think you can just delete this, as it relies on another file for validation. Setting up fresh keychain files may force setting up authenticated services again, once you're logged in. Once again, make sure you have a backup before you do any manipulations of these core files.

Blazecock Pileon

Do you have the computer set up for multiple languages / keyboard layouts? I use both Dvorak and QWERTY, and sometimes certain OS password panels will have a different keyboard selected. In some situations the panel has a menu tucked away in a corner where you can change the keyboard, but I've also seen situations where that isn't the case and you just have to guess and try the other keyboard. (This is basically a longer version of what Gungho suggested.)

alms

Related Q & A:

Just Added Q & A:

Find solution

For every problem there is a solution! Proved by Solucija.

  • Got an issue and looking for advice?

  • Ask Solucija to search every corner of the Web for help.

  • Get workable solutions and helpful tips in a moment.

Just ask Solucija about an issue you face and immediately get a list of ready solutions, answers and tips from other Internet users. We always provide the most suitable and complete answer to your question at the top, along with a few good alternatives below.