Best way to re-sync service account passwords

[jarednichols]

Hi-

I use a hidden ssh account for all of my admin functions on my clients. No use of a >500 UID account. I have the JSS spinning the passwords on the account to a random 16 character password due to high security environment.

Some of the machines, the account password has become de-syncronized whereby the user needs to locally authenticate in Self Service (they normally don't need to) and I can't remote into the machine. They do normally check in for policies though. All indications to me seems to be that the JSS stored password and the password on the machine aren't the same.

What's the easiest, least user impacting way to fix this?

Thanks

j
---
Jared F. Nichols
Desktop Engineer, Infrastructure & Operations
Information Services Department
MIT Lincoln Laboratory
244 Wood Street
Lexington, Massachusetts 02420
781.981.5436

[jarednichols]

Actually, I think I figured it out :)

I setup a policy that will execute on any that will reset the account to a known password. So, let the machine check in and then it'll change it. Next time it hits the spin password policy, all's good.

Sound right?

j
---
Jared F. Nichols
Desktop Engineer, Infrastructure & Operations
Information Services Department
MIT Lincoln Laboratory
244 Wood Street
Lexington, Massachusetts 02420
781.981.5436