× Welcome to the Centrify Community! Looking for Express & Smart Card Help? Click Here

Uninstall Centrify now cannot login

Showing results for 
Search instead for 
Do you mean 
Reply
Highlighted
Participant II
Posts: 4
Registered: ‎03-11-2015
#1 of 19 5,955
Accepted Solution

Uninstall Centrify now cannot login

[ Edited ]

So I wanted to remove Centrify from a mac to get it off our network. I found an article that showed the commands:

 

http://community.centrify.com/t5/Express-for-Mac-Tips-and-Tricks/How-to-Uninstall-Centrify-DirectCon...

 

After going through the motions I then restarted the system. Now I cannot login with either the user account, or the administrator account that is on the machine. I tried going into command+R and using Terminal with the "resetpassword" GUI but even changing it there, when I restart I cannot get in.

 

What's going on?

Posts: 532
Kudos: 210
Blog Posts: 24
Solutions: 25
Registered: ‎04-19-2012
#2 of 19 5,942

Re: Uninstall Centrify now cannot login

Hi jh52240,

(1)
Which version of OS X are you running and what version of Centrify was installed?


(2)
Are your user and admin accounts pure-local accounts, or were they AD accounts?


(3)
Have you tried creating a new local admin account using single-user-mode as described here:
- http://www.hackmac.org/tutorials/how-to-create-a-new-administrator-account/


Kind regards,
Brian
Participant II
Posts: 4
Registered: ‎03-11-2015
#3 of 19 5,940

Re: Uninstall Centrify now cannot login

Hey thanks for the reply!

 

1) OS x 10.10 and 5.2.3-429

 

2) One AD account, and the local administrator account. Both of which could not login after removal.

 

3) Right now I'm restoring it from a TimeMachine backup to prior to the uninstall, but if it happens again I will use the single-user-mode and manually add an admin account.

 

Thanks!

Posts: 532
Kudos: 210
Blog Posts: 24
Solutions: 25
Registered: ‎04-19-2012
#4 of 19 5,929

Re: Uninstall Centrify now cannot login

Hi jh52240,

 

The AD account no longer being available after uninstalling the agent makes sense because since your machine is no longer connected to the domain (via the agent), it no longer has a reference to the AD account. The AD cache is also removed when the Centrify agent is uninstalled. 

 

The Local Admin account not being available after uninstall is unexpected though as the agent removal should not have affected any local accounts. The most common culprit is usually if the local admin had previously been mapped over to an AD account... leaving no pure-local account on the Mac as backup.

 

 

The recommended sequence for uninstallation should look something like:

 

(1) Make sure all users are logged out of the Mac

 

(2) Login as Local Admin

 

(3) Go to System Preferences > Centrify > [ Uninstall ] 

 

(4) The system will be unbound from the domain and agent software removed. 

- AD users will not be able to login (though any local home folders will still be present on the system)

- Local accounts should be unaffected.

 

 

 

Hope that helps and let me know how your Time Machine restore goes for you.

 

Kind regards,

Brian

Participant II
Posts: 4
Registered: ‎03-11-2015
#5 of 19 5,859

Re: Uninstall Centrify now cannot login

Hey Brian, so our macs do not have the option you stated in #4 so I'm stuck with using the command line to uninstall.

 

sudo /bin/sh /usr/share/centrifydc/bin/uninstall.sh

This has been working fine except on one system which is giving me the below error. We're trying to remove Centrify completely out of our environment and it's been a literal nightmare...

 

2013-12-10 07:56:49 ### running preflight script
2013-12-10 07:56:49 Centrify not installed, performing a clean installation
2013-12-10 07:56:49 adlicense mode: N
2013-12-10 07:56:49 ### running postflight script
2013-12-10 07:56:49 adinfo (CentrifyDC 5.1.1-920) now installed
adding /usr/bin/dzsh to /etc/shells ...
2013-12-10 07:56:49 Backing up original tokend
2013-12-10 07:56:49 Untaring new tokend to /System/Library/Security/tokend
2013-12-10 07:56:49 Enforcing correct ownership on /System/Library/Security/tokend
2013-12-10 07:56:49 Backing up original pcscd
2013-12-10 07:56:49 Untaring new pcscd to /usr/sbin
2013-12-10 07:56:49 Enforcing correct ownership on /usr/sbin/pcscd
2013-12-10 07:56:49 enabling dsplugin
dscl -raw /Search -append / dsAttrTypeStandard:CSPSearchPath '/CentrifyDC/Default'
Centrify DirectControl DirectoryService plugin activated
2013-12-10 07:56:49 restarting dsplugin
System Cache flushed
2013-12-10 07:56:49 displaying warning
2013-12-10 07:56:49 set adlicense mode
The mode is express.


uninstall.sh ************** rev = 2013.2 (5.1.1-919) *****************
Fri 30 Oct 2015 14:14:54 EDT
INFO: Full Mac OS version: 10.10.3
ERROR: unknown OS revision: 10.10. Exiting...

Error detected.
Exiting ...
EXIT CODE: 29
Posts: 532
Kudos: 210
Blog Posts: 24
Solutions: 25
Registered: ‎04-19-2012
#6 of 19 5,855

Re: Uninstall Centrify now cannot login

Hi jh52240,

 

The output shows that the machine running OS X 10.10.3, but it's running a much older version of the Centrify agent - version 5.1.1-920.

 

The minimum compatible version of the Centrify agent for OS X Yosemite is 5.2.1-351, which is why this uninstaller is coming back with "unknown OS revision".

 

 

Please try this:

 

(1) Login to the target Mac as Local Admin and download the attached zip and extract the uninstall.sh script.

-(This uninstaller was extracted from a 5.2.1 agent)

 

(2) Replace the existing uninstall script on the Mac:

 

  /usr/share/centrifydc/bin/uninstall.sh

 

(3) Open the Terminal and run:

 

sudo chmod +x /usr/share/centrifydc/bin/uninstall.sh
sudo sh /usr/share/centrifydc/bin/uninstall.sh

 

 

Let me know if this works for you.

 

Kind regards,

Brian

 

Participant II
Posts: 4
Registered: ‎03-11-2015
#7 of 19 5,803

Re: Uninstall Centrify now cannot login

This worked perfectly!

 

Thank you!

 

 

Participant II
Posts: 5
Registered: ‎12-15-2016
#8 of 19 2,592

Re: Uninstall Centrify now cannot login

Hi, I have the same problem with newer version of Mac OS

 

Detecting local platform ...
ERROR: unknown OS revision: 10.12. Exiting...

 

I tried the file you attached and still didn't work. Can you send a new unstall script? Thanks!

Centrify Advisor II
Posts: 48
Registered: ‎04-18-2016
#9 of 19 2,588

Re: Uninstall Centrify now cannot login

[ Edited ]

Hi Lee75712,

 

Which version of Centrify do you have? Are you having problems uninstalling or logging in after uninstall?

Participant II
Posts: 5
Registered: ‎12-15-2016
#10 of 19 2,576

Re: Uninstall Centrify now cannot login

Hi Sejohnwu, How do I check Centrify version on my mac? Yes, I have problem uninstalling centrify - see the error listed in my previous message. I have MacOS Sierra 10.12.1.

 

Thanks!