Using /usr/bin/security for password access confused by repeat account name

One should be able to lookup a password from the CLI with
`security find-generic-password -a test -g`
This formulation seems to assume that you use 'test' as a unique account name.
If you use a common login name across multiple generic password items,
then this formulation returns the first match, not an array or
plist of /all the matches/.
That is:
`security find-generic-password -a test`
returns the first entry of 'test' as an account name, not an indexed plist, as I would expect.
One must, it seems have to add a comment field per entry to be able to select
the appropriate generic password
`security find-generic-password -j server1 -g`
I've read through the man page a few times, but haven't been able to find a
way to iterate / specify / select based on account name that's shared across
entries.
Anyone else tried this out?

Hi
I believe you can set an open firmware password to prevent someone booting from the OS X disc:
http://docs.info.apple.com/article.html?artnum=106482
At the end of the day though, if someone has physical access to your computer and in particular your hard drive, they could probably access your information anyway by simply removing the hard drive and mounting it in another computer.

Similar Messages

  • How to use taglibs in JSP for Database access

    Hi
    Could any one please tell me how to use taglibs in JSP for Database access
    with regrds
    Jojo

    This is a sample how to connect to a MySQL database with JSTL 1.0:
    <%@ page contentType="text/html; charset=iso-8859-1" language="java" import="java.sql.*" errorPage="" %>
    <%@ taglib uri="http://java.sun.com/jstl/sql" prefix="sql" %>
    <%@ taglib uri="http://java.sun.com/jstl/core" prefix="c" %>
    <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
    <html xmlns="http://www.w3.org/1999/xhtml">
    <head>
    <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
    <title>JSTL MySQL</title>
    <link href="styles.css" rel="stylesheet" type="text/css" />
    </head>
    <body>
    <c:catch var="e">
    <sql:setDataSource var="datasource" url="jdbc:mysql://Your_Server_Name_Here/You_Schema_Here"
                           user="Your_Username_Here" password="Your_Password_Here"
                           driver="com.mysql.jdbc.Driver"/>
    <c:out value="datasource= ${datasource},  Class = ${driver.class}"/>
    <br />
    <br />
    <sql:query var="deejays" dataSource="${datasource}">SELECT * FROM Your_Table_Name_Here</sql:query>
    <table>
    <%-- Get the column names for the header of the table --%>
    <c:forEach var="columnName" items="${deejays.columnNames}"><th><c:out value="${columnName}"/></th></c:forEach>
    <tbody>
    <%-- Get the value of each column while iterating over rows --%>
    <c:forEach var="row" items="${deejays.rows}">
      <tr><c:forEach var="column" items="${row}">
            <td><c:out value="${column.value}"/></td>
          </c:forEach>
      </tr>
    </c:forEach>
    </tbody>
    </table>
    </c:catch>
    <br />
    <br />
    <c:if test="${e!=null}"><span class="error">Error</span>�
      <c:out value="${e}" />
    </c:if>
    </body>
    </html>And this thread might help you:
    http://forum.java.sun.com/thread.jspa?threadID=639471&tstart=44

  • My used macbook is asking for password to unlock different keychains, how do i reset the password?

    my used macbook is asking for password to unlock different keychains, how do i reset the password?

    Hi nylife02,
    Welcome to the Apple Support Communities!
    Without knowing the exact keychain alert your are receiving, I will leave articles for the ones that are most likely the culprit. The one it sounds most like to me is “login” keychain. Please review the article below if indeed you are receiving the “login” keychain prompt.
    OS X: Keychain Access asks for keychain "login" after changing login password
    http://support.apple.com/kb/ht1631
    Another keychain prompt that this may be is the “Local Items” keychain. Please follow the attached article if the prompt is for “Local Items” keychain.
    OS X Mavericks v10.9.1: Repeated prompts to unlock "Local Items" keychain
    http://support.apple.com/kb/TS5362
    Have a great day,
    Joe

  • Using /usr/bin/mail

    I have some Perl scripts in which I would like to utilize /usr/bin/mail to send e-mail. I've tried using /usr/bin/mail from the command line to send a test message to my yahoo address, and it fails. I imagine this is pretty basic stuff for a Unix sysadmin, but all I've ever been is a user. What do I need to do to use /usr/bin/mail to send mail?
    Thanks,
    Brad

    the main thing you need is an open port 25. If it's open, then command line mail should work out of the box with no further preparation. it works on my work computer for example and I can send mail to my yahoo address from it.
    However, most internet providers block port 25. I suspect that's the case for you. then you need to set up mail to work with some external smtp server. I've never done it but it should be possible. see these links
    http://www.macosxhints.com/article.php?story=20081217161612647
    http://www.macosxhints.com/article.php?story=20050911184730802

  • How to use /usr/bin/gcc  with Accelerate?

    Hi,
    After upgrading Mac to OSX10.9, C compiler has been changed to LLVM.
    Using gcc4.9(http://hpc.sourceforge.net), /usr/local/bin/gcc -framework Accelerate xxx.c works well.
    Using /usr/bin/gcc, how to compile it with Accelerate?

    Put the line, #include <Accelerate/Accelerate.h>, in your program,
    cc -framework Accelerate xxx.c

  • HT3728 I do not need another wireless network but want to use the airport express for printer access only.  Can this be done and how?

    I do not need another wireless network but want to use the airport express for printer access only.  Can this be done and how?

    You can configure the AirPort Expess to "Join a wireless network" and enable the Ethernet port so that Ethernet devices will be able to connect.
    In order to print from the iOS devices, you will need to have an application like Printopia installed on your Mac. The Mac must be active when you want to print.
    More details here: Printopia - AirPrint to Any Printer - Print from iPad - Print from iPhone ...
    There is a free trial available for Printopia, so make sure that it will work before you buy the AirPort Express.

  • I have a MSN email address but using a Mac; recently I cannot access my man email account; have I been hacked and what should I do? Thanks

    I have a MSN email address but using a Mac; recently I cannot access my man email account; have I been hacked and what should I do? Thanks

    simply telling us you can't access your email really tells us nothing.  more details please.

  • Why if my iCloud info is the same as my iTunes login and password does it say the account name or password is incorrect when trying to log in

    Why if my icloud info is the same as my itunes login and password does it say the account name or password is incorrect

    Oops
    Forget that, wrong forum.

  • Using "/usr/bin/open" Remotely

    Hi,
    I'm wondering if it's possible to execute /usr/bin/open remotely over an ssh connection without executing it as root with sudo. I've added the necessary configuration in the sudoers file that should have let me execute this, however, it still won't work for some reason.
    Any suggestions or ideas would be appreciated.
    PowerMac G5 Revision B   Mac OS X (10.4.4)  

    Hi Bill,
       I recall when you first brought this up but I don't recall your mentioning that a window can be displayed over the loginwindow. That's pretty stupid and if I saw it, I'm not sure if I would laugh or cry. Is that Terminal window opened as root? In the past, the "open" command ignored effective UIDs and would open the application as the user corresponding to the real UID of the parent process. I would be surprised to hear that Apple has changed that. (LC_LOCALE="state of denial")
       On the other hand, doing that would be the moral equivalent of putting all users in the sudoers file with NOPASSWD for ALL commands. It wouldn't be easy for me to muster sympathy for anyone so careless with their root privileges.
    Andy,
       That the WindowServer is always running hardly surprises me. It would really have to be in the global namespace; even a loginwindow is a window. The same is true of other flavors of UNIX; the XServer is virtually always running. However considering Bill's example, I have to say that an XServer is far more discriminating in choosing which requests to honor. In the words of James Tiberius Kirk, "You may ask ..."
       Given the poor reputation for security earned by XWindows, being compared unfavorably with it doesn't bode well for the future of Macs in multiuser environments. Granted, the original implementation of Fast User Switching was little more than a novelty — hardly ready for prime time. However, I had far higher hopes for Tiger. You may ask ...
    Gary
    ~~~~
       Washington, D.C:
          Fifty square miles almost completely surrounded by reality.

  • Mail app asking for passwords it already knows, taking accounts offline, intermittently failing to connect IMAP/SMTP

    Recently I have been experiencing intermittent connection failures with Mail in OS X 10.7.5 on both our Mac Pro and MacBook Pro.
    The little "lightning bolt" icon or the "exclamation point" icon will occasionally appear next to some or all of my accounts in the left column and Mail will (sometimes) prompt for passwords already in my keychain and then take the accounts offline. Sometimes the failures take place during IMAP logins and sometimes during SMTP sends. Sometimes they affect my iCloud accounts, sometimes my Gmail accounts, and sometimes both.
    When I try to take the account(s) back online, Mail sometimes fails to do so. Quitting the Mail application completely and relaunching it will randomly result in the problem persisting or going away. What makes this so confusing is about half the time, Mail works just fine.
    This is only happening on OS X, in Apple Mail, our iPad and iPhones appear unaffected even when running on the same router with the same ISP. I can also verify that all the iCloud and Gmail accounts in question can be reached successfully using other mail client software from Windows in my various virtual machines. Therefore I believe this is an application issue and not something related to my network.
    When the issue is evident, Connection Doctor will fail on some or all counts...when it goes away Connection Doctor will show all green lights again.
    This issue has only manifested in the past week or so, and both machines are up to date on Software Updates. Perhaps something pushed out recently from Apple is causing this? Is anyone else having a similar experience?

    Same issue, too.  But I have nothing better to do than try to fix Apple problems that appear mysteriously and randomly; I'm sure you're the same way.
    The REAL REASON, which can no longer be overlooked, is that Apple's (probably underpaid sweatshop Chinese) employees build toys for grown-ups and do little more than that.  I wish I had never bought my Mac (2009) since few things about Apples are "intuitive" unless you've been an Apple cultist since Jobs introduced the first Mac.  Oh, and because things mysteriously stop working, something I don't recall happening with any of the PCs I've owned. 
    Apple's version of Excel is a total joke and on an update that I did not ask for, the "Save As" feature, a convention that was 30 years old and worked well, was removed in favor of "Duplicate, Rename, Save."  What 22 year-old Apple product manager was allowed to make this change? 
    I foolishly compounded my Mac purchase error by buying an iPhone 4S.  On that lovely ($200 Verizon-subsidized) product, I can no longer discover my home network, rendering my ($100) Airplay for outdoor music useless.  (But I probably can post a picture directly to Facebook or something!  More toyish behavior in which Apple specializes.)  Can I get support on these POS with a phone call?  No, I need to rely on a Aapl cultist to devise some esoteric key combo or a "jailbreak" on a Support board or blog site.
    I'm eligible for a phone upgrade on 8/13 and I'm counting the days.  Will upgrade to a good large-screen laptop asap as well and then throw the Mac out my office window.  Junk, just junk.  Apple's stock is at $433 from $700 and it's still overpriced.  How long will this rant last before it's sanitized by the Cupertino Big Brother? Maybe what the children who design product ought to do instead is BUILD BETTER STUFF.

  • Login screen does not ask for password when logging into user account

    This is an issue that did not immediately manifest itself after I have upgraded to Snow Leopard. I am not sure what exactly triggered it.
    Anyway, now at the login screen if I choose to login with my own user account, i.e. clicking on the icon associated to my user account, I am not prompted for the password and the system seems to start trying to login, as there is a discernible pause. Obviously that will fail, and I am returned to the login screen again.
    If I choose the other user option, as before I will be allowed to manually type in an user id and password, and using this way I am able to login into my own account (previously I only use this for logging in to the root account).
    Any idea on how I can make the field for typing in the password appear again? Thanks.

    Just to report that deleting /Library/Preferences/com.apple.loginwindow.plist did not help.
    Anyway I installed Snow Leopard again and the problem went away. Hope I will not do something that will trigger it again.

  • How to override security for table access when using SAP Query?

    We have a number of infosets which use table join between PA0001 and CATSDB table. To execute a query based on such a query you would need access to table auth group PA through S_TABU_DIS. This was earlier not a problem as SAP query was earlier used by support staff and not end users. We do not want to give S_TABU_DIS with to end users as this amounts to givin them access to all PA tables.
    The generated code for the query checks for the condition
    "%rtmode-no_authchk = space"
    before going for the authorization check.
    Thus, ideally the authorization check for an InfoSet can be skipped if we can pass X for this variable from the InfoSet definition. Is there a way to do this?
    Would appreciste any inputs to help suppress the authorization check at this point. Thanks.....

    >
    Julius Bussche wrote:
    > Perhaps you could replace it with a class of your own (transaction SE24)?
    >
    > I have not tried to do this; it was just a thought.
    >
    > Kind regards,
    > Julius
    unfortunately this does not work. SAP saw fit to 'hard-code' the implementation of the interface in RSAQEXCE:
    (only parts of that abap displayed here).
    170 data: iref type ref to if_query_tab_access_authority.
    1107 *       FORM AUTHORITY_BEGIN
    1112 form authority_begin using p_auth_classname type AQS_CLSNA.
    1119   perform authority_init using p_auth_classname.
    1120   call method iref->access_authority_begin.
    well for my part (searching a solution for a query on LTAK, wanting L_LGNUM as an object) i'm out of ideas. i shall have to modify SAP-standard and disable the class and do my own coding in the info-set. no other possibility - i cannot allow S_TABU_DIS for group LA and even if i did, what help would it be - i would have to allow that to all companies in that client having WM - and that would be literally all - i need LGNUM here!

  • Trash bin asking for password

    My trash bin all the sudden asked for a password when I drag things into it and then it doesn't show up in the bin.  How do I make it back to the way it used to be?

    Open Terminal.app, located in the  Applications > Utilities folder.
    At the Terminal prompt, copy and paste the following command:
    sudo rm -ri ~/.Trash
    then enter/return and quite terminal.app

  • Advantages of using a seperate controller for guest access?

    Can someone give me a good reason to use a seperate controller in a DMZ for guest users versus just trunking a DMZ VLAN to the controller. Certainly it makes sense to have a guest controller when you DMZ is not accessable to the controller locations (or you have a bunch of remote locations, but only one internet connection), but in the event that the controllers are located in a place that it can hit the DMZ is there a good reason to use a guest controller.

    I'm not even sure if that is a good reason. You can alway trunk to another non-routed VLAN and stick a cable modem and firewall to give guest user access. I'm working with someone now that thinks this is the way to go, but I've got to add a 4402-12, a switch (need GB connectivity for the controller) at a minimum. Again, it would make perfect sense if the location of the internet was not in the same building.

  • How to use 2 TMG Servers for Internet Access

    Hi there,
    This is what we have setup at the moment.
    We have two TMG 2010 SP2 Servers, let's call them TMG1 & TMG2. They sit in two different sites (physically not logically) which I will refer to as Site1 and Site2. TMG1 sits in Site1 and TMG2 in Site2.
    All internal users access the Internet via TMG1. They all have TMG Clients installed and they receive TMG1 as their proxy server (WPAD) via our DHCP servers. 
    I feel bad to see that TMG2 cannot take a little bit of traffic off from TMG1 for those who want to access the Internet. How can I go about doing this. I can achieve this by adding the TMG2 manually on TMG Clients but I prefer to do this automatically. Is
    there a way to publish TMG2 in WPAD while TMG1 is already there? Dont forget we only have the luxury of using two TMG
    Standard servers. :(
    Thank you.

    Hi,
    You can consider to configure the Forefront TMG Arrays or NLB.
    Planning for Forefront TMG server high availability and scalability
    http://technet.microsoft.com/en-us/library/dd897010.aspx
    Thanks.
    Jeremy Wu
    TechNet Community Support

Maybe you are looking for