Security when authenticating after sleep

I hope someone can tell me if this is an issue or not. In our house, we have 2 admin accounts on an iMac running 10.5.2 (I'll call the users "1" and "2"). Fast user switching is enabled. On waking from sleep, if user 1 is logged in, user 2 can get past the authenticate dialog by changing the user name to "2" and typing in user 2's password. This then gives user 2 full access to user 1's files. I appreciate that it's much more secure to actually log out each time you finish using the computer, but should this be possible?
Many thanks,
Clinton.

The described behaviour is not a bug - it is intentional. If you look at the "/etc/authorization" file, you will see that the "system.login.screensaver" right is granted to "session-owner-or-admin", i.e. in addition to the owner of the login session, any "admin" user is allowed to unlock the screen lock.
An "admin" needs to be able to administer the computer. The current behaviour predates "fast user switching" - back then, were it not for this feature, if someone on a multi-user machine locked their screen and went home, nobody else would be able to log in without rebooting the system. Even today, if FUS is turned off, the screen saver password dialogue doesn't include an option to switch to the login window.
Also keep in mind that an "admin" user already has full access to the system anyway. They already have access to all unencrypted files, and could turn on "Remote desktop" to access the GUI session. Even a "FileVault" user session can be accessed by an "admin" if the user is already logged in. The ability of an "admin" to unlock another user's screen lock does not introduce any additional security issue.

Similar Messages

  • Is there any succesful answer to the many questions about not functioning wifi after installing mountain lion? Also when awakes after sleep MB frezees, wifi can´t get active, dock does not show, in general MB does´t respond. All this in mountain lion.

    When awakes after sleep MB frezees, wifi can´t get active, dock does not show, in general MB does´t respond. All this after I installed an update of mountain lion.

    Try starting up in Safe Mode and see if things are better.
    http://support.apple.com/kb/ht1455

  • Problem with ADF Security / SQL Authenticator after upgrade to 11.1.1.6

    Hi,
    We have an ADF application built with JDeveloper 11.1.1.2 that's been in production for a couple of years. Now we are in the process of upgrading to 11.1.1.6 so I have upgraded WLS and ADF in a test environment and re-deployed the application there. The application uses users and groups from database using SQL Authenticator configured in WLS. This worked fine in the old version but now after the upgrade we can't log in with credentials from the database. I can log in if I add a user to the default authenticator. We didn't touch any of the authenticator settings or security realm configurations during the upgrade. Both authenticators are marked as SUFFICIENT, as they have always been.
    Has something changed in the way SQL Authenticator is used since 11.1.1.2? What could be the problem?
    Regards,
    Joonas

    Answering myself here: after recreating the SQL Authenticator and the ADF Security configuration logins are working again. Don't know where the problem was though.

  • Authentication after sleep

    During the day, all works OK, but at night, the client macs go into sleep mode.
    In the morning when users log in to the client computers, they will not log in to network accounts, without first being restarted.
    (The server is always active and never sleeps)
    Any ideas?
    Matthew

    Hi matfrost
    I guess you are talking about an Open Directory Master, automounting Home Folders and MCX (managed preferences?) If thats the case, then perhaps you are not waiting long enough. Would that be true?
    If you are managing preferences you could present a login window showing network users to your clients. You can do this by managing the login window for your machines rather than the users and groups. When the students come to wake up the client macs in the morning they wait until the LDAP server presents the complete network users list, they should then be able to log in without restarting.
    You could combine this with a scheduled shutdown and startup using the Energy Saver Control Panel. For example have the client macs shutting down at 10pm and starting up at 8am, you could even do this for the server depending on the backup strategy you employ. Its amazing how much you can save on your electricity bills by doing this as well as doing your bit for the planet!

  • Slow login after sleep or slow authentication when click on lock in prefs

    takes about 30 seconds to login after sleep or clicking on the lock during a system preference change
    9/16/09 6:33:32 PM com.apple.launchd.peruser.501[120] (com.apple.pbs) Throttling respawn: Will start in 10 seconds
    9/16/09 6:34:12 PM System Preferences[1294] * WARNING: Method selectedRowEnumerator in class LoginItemsTableView is deprecated. It will be removed in a future release and should no longer be used.
    9/16/09 6:35:28 PM com.apple.launchd.peruser.501[120] (com.apple.pbs) Throttling respawn: Will start in 10 seconds

    See:
    Mac Maintenance Quick Assist,
    Mac OS X speed FAQ,
    Speeding up Macs,
    Macintosh OS X Routine Maintenance
    Essential Mac Maintenance: Get set up,
    Essential Mac Maintenance: Rev up your routines,
    Maintaining OS X, and
    Myths of required versus not required maintenance for Mac OS X for starters.
    BTW, reinstalling the OS only puts down new copies of OS components and basic Apple apps, such as TextEdit, Mail, and Safari, leaving everything else in place. The nuke and reinstall isn't needed.

  • IOS 8.1 installed yesterday has spoilt my iPad 2! There are no keyboard, message or app sounds, performance is now sluggish, juddery and strange, battery is draining fast and it no longer security locks when put to sleep.

    I am so cross because iOS 8.1 installed yesterday has ruined my iPad 2! There are now no keyboard, message or app sounds, performance is slow, juddery and strange, the battery is draining fast and the iPad no longer security locks when put to sleep.  I have checked all the settings, done a number of resets and really wish I hadn't bothered and stayed with iOS 7 when it all worked like a dream.  I thought that by waiting until 8.1, teething problems would have been fixed and I am just horrified that there is no going back!  I am not the only iPad owner that has this set of problems so why didn't you warn us Apple!  What are you going to do to help us?  I do not want to be forced into buying a newer version of iPad because you broke this one!

    In spite of the fact that you said you checked the settings, I still believe that you have system sounds muted.
    System sounds can be muted and controlled two different ways. The screen lock rotation can be controlled in the same manner as well.
    Settings>General>Use Side Switch to: Mute System sounds. If this option is selected, the switch on the side of the iPad above the volume rocker will mute system sounds.
    If you choose Lock Screen Rotation, then the switch locks the screen. If the screen is locked, you will see a lock icon in the upper right corner next to the battery indicator gauge.
    If you have the side switch set to lock screen rotation then the system sound control is in the control center if you are running iOS 7. Swipe up from the bottom of the screen to get to control center . Tap on the bell icon and system sounds will return.
    If you have the side switch set to mute system sounds, then the screen lock can be accessed in the same manner as described above.
    This support article from Apple explains how the side switch works.
    http://support.apple.com/kb/HT4085
    AS for your other issues, have you done any other troubleshooting like resetting your iPad, resetting all settings or doing a complete factory reset?

  • I am trying to get minecraft for my iPod touch. When I put in my apple ID it says that I have to verify that I can buy it. I click ok I pulls up a site ask me for my apple ID and then I put in my security questions. After that it ask me some weird questio

    I am trying to get minecraft for my iPod touch. When I put in my apple ID it says that I have to verify that I can buy it. I click ok I pulls up a site ask me for my apple ID and then I put in my security questions. After that it ask me some weird question like Who Is your favorite teacher and another question like what is your least favorite car model. I did not set those as my secure questions. So can u please help me

    Forgotten Security Questions/Answers
    You need to contact Apple by:
    1 - Use the Express lane and start here:
    https://expresslane.apple.com
    then click More Products and Services>Apple ID>Other Apple ID Topics>Forgotten Apple ID security questions.
    or
    Apple - Support -form iTunes Store - Contact Us
    2 - Call Apple in your country by getting the number from here:
    http://support.apple.com/kb/HE57
    or           
    Apple ID: Contacting Apple for help with Apple ID account security
    3 - Use your rescue email address if you set one up
    Rescue email address and how to reset Apple ID security questions
    For general  information see:
    Apple ID: All about Apple ID security questions

  • When I upgraded my OS to OS X 10.9 the computer doesn't connect the LAN automatically after sleep. Could you help me?

    When I upgraded my OS to OS X 10.9 the computer doesn't connect the LAN automatically after sleep. Could you help me?

    just an update on the situation....
    the problem is solved. after trying everythng, at last i did a reset on my linksys e3200 router - and BANG!!!
    airplay works.
    hope this helps someone else.

  • Jumpy mouse and shut-downs on G4 mirror door when putting to sleep or just random shut down after install of new 2nd internal WD IDE 320 gig hard drive, OS 10.4.11, orig HD is WD 80, RAM = 2 gig.  Help!

    Jumpy mouse and shut-downs on G4 mirror door when putting to sleep or just random shut down, is now occuring after install of new 2nd internal WD IDE 320 GB hard drive, running OS 10.4.11, orig HD is WD 80 GB, RAM = 2 gig.  Help!

    Hi Ted,
    At this point I think you should get Applejack...
    At this point I think you should get Applejack...
    http://www.macupdate.com/info.php/id/15667/applejack
    Ignore the MacKeeper ad no matter what else you decide.
    After installing, reboot holding down CMD+s, (+s), then when the DOS like prompt shows, type in...
    applejack AUTO
    Then let it do all 6 of it's things.
    At least it'll eliminate some questions if it doesn't fix it.
    The 6 things it does are...
    Correct any Disk problems.
    Repair Permissions.
    Clear out Cache Files.
    Repair/check several plist files.
    Dump the VM files for a fresh start.
    Trash old Log files.
    First reboot will be slower, sometimes 2 or 3 restarts will be required for full benefit... my guess is files relying upon other files relying upon other files! :-)
    Disconnect the USB cable from any Uninterruptible Power Supply so the system doesn't shut down in the middle of the process.
    Just sits there occupying very little space & never interfering, unless you need to invoke it in Single User Mode.
    After installing, reboot holding down CMD+s, (+s), then when the DOS like prompt shows, type in...
    applejack AUTO
    Then let it do all 6 of it's things.
    At least it'll eliminate some questions if it doesn't fix it.
    The 6 things it does are...
    Correct any Disk problems.
    Repair Permissions.
    Clear out Cache Files.
    Repair/check several plist files.
    Dump the VM files for a fresh start.
    Trash old Log files.
    First reboot will be slower, sometimes 2 or 3 restarts will be required for full benefit... my guess is files relying upon other files relying upon other files! :-)
    Disconnect the USB cable from any Uninterruptible Power Supply so the system doesn't shut down in the middle of the process.
    Just sits there occupying very little space & never interfering, unless you need to invoke it in Single User Mode.

  • Very loud fan sound after sleep when Ram is upgraded.

    Recently I have upgrade the Ram memory from 1Gb to 5Gb with (2x2GB) FB-DIMM DDR2 667MHz from Ondamatica. Memory works perfectly, hardware tests were OK and i didn't notice any issue except one: after sleep, fans start to spin faster and faster (seems like a vacuum) to what I supose Is the fastest speed they support, during arround a minute or 45 seconds. That generates an intense noise but happens only when awake afer sleep, not when restarting.
    I've done almost everything: reset pvram, reset SMC, change memory slots... And the issue only stops when I remove the new two Ram modules.
    I've read about it in some forums, but no one solved it. ¿Any suggestion before I return the Ram to the store?. Could be a software problem?.

    It will or can happen but you can reduce it somewhat maybe using SmcFanControl (2.1.3.1 - wwww.macupdate.com ) to keep the fans above default by 200 rpm. And run Hardware Monitor to monitor temps as well. They may be running much warmer than they could/should/ought to.
    1GB and your system was on starvation express! ouch. 4GB is more of a normal minimum even. 4 x 1GB is nice balanced setup. 2GB DIMMs might be warmer, run 70C perhaps. And they use about 15W each.

  • HT201177 My Macbook pro: After sleeping, the screen comes on momentarily then blacks out.  When I close the lid and reopen it the same thing happens.  The screen only does this after waking up from sleeping.  Help, thanks!

    Macbook Pro:
    When I raise the lid after sleeping, the screen comes on momentarily then backs out.  If I close the lid and raise it again, the same thing happens.  It is sometimes necessary to force quit.  Once restarted, there is no problem unless the lid is closed for a short time and the machinge goes to sleep.
    Help! Hesperia fire captain

    Hi ...
    Try Resetting the System Management Controller (SMC)

  • Security Update 2007-004 v1.1 did not fix connectivity after sleep

    I installed the new security update (2007-004 v1.1) which was supposed to fix airport cards from disconnecting from their wireless network after sleep...but it didn't fix the problem. Is anyone else STILL having trouble?

    I was having the same problem with connectivity after sleep, but once I used the Security Update 2007-004 v1.1 I no longer that THAT problem, but now I have another,....
    in MAIL, there is definitely a 'long' pause before graphics are displayed. Or while using Safari, the text for a new page will display fairly quickly, but again there is a 'long' pause before the graphics show up. I am comparing the time before the first 2007-004 update and now. Before, the graphics downloaded fairly quickly. In the MAIL program, just clicking on an email caused the graphics to appear, in fact, they were just THERE. But now, again there is that longish pause before they appear.
    Has this happened to anyone else? And ideas what I can do?
    PowerBookG4   Mac OS X (10.3.9)  

  • After sleep, audio turned on when using USB-Audio!

    It seems that after the EFI update, the external USB Audio device is also on after standby and not muted as before!
    I have a C-Media USB Headphone set (this means external speakers over an USB), normally muted.
    After sleep it is unmuted and at full volume. (When i let it with low volume, after standby it is also at full, but the bars are displaying it as low).
    Anyone same experience?

    UPDATE:
    I decided to try going through an Firewire Audio Interface instead. Keyboard-(MIDI)->MOTU Traveler-(Firewire)->MacBook Pro.
    Same corruption/hiccups/choppy playback.

  • Battery dead from 60% over 6 hours when i am sleeping, all happened after i updated to ios6.0.2, want to downgrade to ios6.0.1, anyone can help?

    Battery dead from 60% over 6 hours when i am sleeping, all happened after i updated to ios6.0.2, want to downgrade to ios6.0.1, anyone can help?

    How do I disconnect my Facebook account from my Apple device that has iOS 6?  
    Open your Settings in iOS
    Scroll down and tap Facebook
    Tap your name > Delete Account
    This disconnects your account from your Apple device, but it won't delete your Facebook account or deauthorize apps that you’ve already approved

  • MBP 2010 13'' completely freezing when loading from sleep after battery drain

    Hi all,
    Ever since upgrading do Mountain Lion, everytime my MBP 2010 13'' goes to sleep after battery drainage, it freezes in the last "dash" of the waking up process. Furthermore I noticed that the background during wake up is not my dimmed desktop anymore as it used to be on Lion, it is the Apple logo on a white background (similar to Power up screen). I experience no other freezing stated by the community that are attributed to ML, iTunes or Safari, only this one when recovering from sleep. This last time I waited a couple of hours before power down, only resulting in abnormal heating. Already tried fully charge, fully recharge, reboot, cmd+opt+p+r, ... Anyone has this? Is it a known problem being somehow addressed by Apple? Thanks in advance!

    So can anyone tell me how can I open an issue on this for Apple? Thanks.

Maybe you are looking for

  • Who's Who - Restrict Result List

    Dear, My problem today is that my Who's Who displays all the positions from the backend in the result list. For example, if Mr X was in entity A til end of Dec07 and then he changed position and was in entity B. Then Who's who displayed all the resul

  • New to Mac Please help me

    I have an existing network in my home using my desktop (which is unfortunately a pc). My powerbook automatically connects to the wireless network, and I can use it to get on the internet, but I cannot see the windows computers that are on the network

  • 10.2.0.3 bug, curious

    Hi Guys, there's a bug repoted in 10.2.0.3 for the below: View with select list subquery which is referenced in multiple places in the outer query block view merging of the view can lead to an ORA-600 [qctcte1], a dump, or wrong results. can anyone g

  • FCP 7 regarding compression

    I'm relatively new to FCP 7... I have a question about this part...if you look at the bottom right section...there was a file that i had to compress in order to get vimeo video up... but it was done compressing...it came out "failed." I was still abl

  • Why in Firefox 35 the URL sequence \] is being transformed in "%"5D?

    We have an application that receives an enconding URL having the ] char. On Firefox 35 it is encoded into "%"5D which is causing us trouble decoding the url. Can you provide details on why this modification was held? Thanks and regards, Tito