ADPassMon Preferences

[Matt]

So I've done a lot of searching on this with no real answers. So far I have a LaunchDaemon to open it up but what I am trying to accomplish is setting the preferences for "Show Notifications" and adding it to the Universal Access list. I also would like without the application ever popping up. Does anyone have a preference or a way to accomplish this?

[Chris]

The Prefs are stored in ~/Library/Preferences/org.pmbuko.ADPassMon.plist.
You could use MCX to manage the settings, script them using defaults or capture them in Composer and set to FEU/FUT.
The keys are
enableNotifications - Boolean
expireAge - Integer
warningDays - Integer
enableNotifications - Boolean

For the Universal Access settings, that has changed in Mavericks.
In 10.8 and earlier

touch /private/var/db/.AccessibilityAPIEnabled

did it for me.
In 10.9 you need to modify /Library/Application Support/com.apple.TCC/TCC.db

sqlite3 /Library/Application Support/com.apple.TCC/TCC.db "delete from access where client='org.pmbuko.ADPassMon';"

sqlite3 /Library/Application Support/com.apple.TCC/TCC.db "INSERT INTO access VALUES('kTCCServiceAccessibility','org.pmbuko.ADPassMon',0,1,1,NULL);"

I did a little writeup on this topic recently, documenting how it works in our environment, it's at
http://work.chrisdietrich.de/enabling-accessibility-for-adpassmon-in-mavericks/

[mm2270]

@Chris - Thanks for that. This helped me out with a small app/script I put together which needs accessibility to work. Easy under 10.6 through 10.8, but I was trying to figure out how to get around the new controls in Mavericks. I just tested this out and it worked a charm!

[Sanchi]

Hi @Chris I'm getting the assistive devices problem with El Capitan. The first sqlite command goes through but the second one throws up an "Error 1: Error: table access has 7 columns but 6 values were supplied"

Any ideas what might be happening?

[Chris]

Hi @sancheeto apparently the table layout has changed in ElCap,

sqlite3 /Library/Application Support/com.apple.TCC/TCC.db "INSERT INTO access VALUES('kTCCServiceAccessibility','org.pmbuko.ADPassMon',0,1,1,NULL,NULL);"

seems to work.

[AARP]

I am looking at this with ADPassMon2 and Yosemite. I use the tccutil.py python script by Jacob Salmela (https://github.com/jacobsalmela/tccutil/releases). Running the script does add ADPassMon to the assistive devices list, but strangely, upon first launch, ADPassMon still prompts for admin credentials with the warning "ADPassMon's 'Change Password' feature requires assistive access to open the password panel. Enable it now? (requires password).

Anybody else run into this?

[bentoms]

@AARP I'd advise changing the password in the app, the assistive devices stuff will go in a future release.