This problem arises when /usr/bin/mcxrefresh runs and pulls a null value or a value different than what is stored locally from LDAP (if the attribute isn't defined for the user in question or is defined incorrectly, respectively), overwriting the GeneratedUID stored locally (which is generated and only stored locally when FileVault 2 is enabled without a matching LDAP attribute). Also, this causes the crash of System Preferences on their Mac whenever they try to access the Security & Privacy prefpane.
If the GeneratedUID of a user differs from what was generated (or pulled from LDAP) when FileVault 2 was enabled, the user will not be permitted to unlock the machine, as their account will appear to be unavailable at the EFI menu.
FileVault 2 uses the GeneratedUID user attribute to save who is permitted to unlock an encrypted volume.
0 kommentar(er)
