Skip to main content
Question

Authentication for node /Local/Default failed


Forum|alt.badge.img+16
  • Valued Contributor
  • 125 replies

Hello, we have a local admin account for troubleshooting purposes on our macOS systems. We're seeing that we can login to a small percentage of some of them. No error message, just the password field shake. These accounts are not setup manually, so we're fairly certain that the password is correct.

Logged in from another user, we can run "dscl . authonly <USER>" and then enter the password for the account when prompted.

If we enter a purposefully incorrect password we get:
Authentication for node /Local/Default failed. (-14090, eDSAuthFailed)
<dscl_cmd> DS Error: -14090 (eDSAuthFailed)

If we enter the correct password we get:
Authentication for node /Local/Default failed. (-14167, eDSAuthAccountDisabled)
<dscl_cmd> DS Error: -14167 (eDSAuthAccountDisabled)

So from here it sounds like the account was disabled somehow. But if we run:
dscl . -read /Users/<USER> AuthenticationAuthority | grep DisabledUser

it doesn't have it flagged as Disabled there. I have also run:
pwpolicy -u <USER> -getpolicy

and it doesn't show it as disabled or having any policy set there.

So how can I get this account re-enabled without straight re-creating it?

Thanks

2 replies

Forum|alt.badge.img
  • New Contributor
  • 1 reply
  • June 3, 2020

@Jason Have you ever hot a solution to this problem?


BCPeteo
Forum|alt.badge.img+11
  • Contributor
  • 150 replies
  • December 15, 2022

Getting the same issue. We use sysadminctl to update our default account password and its failing with the same error: <dscl_cmd> DS Error: -14167 (eDSAuthAccountDisabled)


Reply


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings