10.8.1 Location Services Locking AD Account

Lotusshaney
Contributor II

Hi All,

Im playing with location services in 10.8.1 so I can force it on from the command line and set an app to be added to the approved list.

What I have noticed is that when turning on or off location Services in the pref pane :-

  1. The LaunchD trick from 10.7 does not work in 10.8. locationd is always running. There is a plist in /var/db/locationd/Library/Preferences/ByHost that is changed

  2. There is an nvram setting called LocationServicesEnable that is set to %01.

  3. Im a Mobile Account AD User that is an admin and when playing with these settings, without entering a password at any time the mac will lock out my AD account !!!

So far I have yet to get the Location Services to be configurable from the command line but the most worrying thing is that messing with these setting locks my AD account out. So in theory a badly written app that uses location services COULD lock your AD account out !!!

Anyone any ideas ?

1 REPLY 1

Lotusshaney
Contributor II

This bug has been fixed in 10.8.3