Uninstall Centrify now cannot login
10-23-2015 08:16 AM - last edited 12-20-2015 11:12 PM
So I wanted to remove Centrify from a mac to get it off our network. I found an article that showed the commands:
After going through the motions I then restarted the system. Now I cannot login with either the user account, or the administrator account that is on the machine. I tried going into command+R and using Terminal with the "resetpassword" GUI but even changing it there, when I restart I cannot get in.
What's going on?
Solved! Go to Solution.
10-23-2015 11:28 AM
Which version of OS X are you running and what version of Centrify was installed?
Are your user and admin accounts pure-local accounts, or were they AD accounts?
Have you tried creating a new local admin account using single-user-mode as described here:
10-23-2015 11:37 AM
Hey thanks for the reply!
1) OS x 10.10 and 5.2.3-429
2) One AD account, and the local administrator account. Both of which could not login after removal.
3) Right now I'm restoring it from a TimeMachine backup to prior to the uninstall, but if it happens again I will use the single-user-mode and manually add an admin account.
10-23-2015 01:30 PM
The AD account no longer being available after uninstalling the agent makes sense because since your machine is no longer connected to the domain (via the agent), it no longer has a reference to the AD account. The AD cache is also removed when the Centrify agent is uninstalled.
The Local Admin account not being available after uninstall is unexpected though as the agent removal should not have affected any local accounts. The most common culprit is usually if the local admin had previously been mapped over to an AD account... leaving no pure-local account on the Mac as backup.
The recommended sequence for uninstallation should look something like:
(1) Make sure all users are logged out of the Mac
(2) Login as Local Admin
(3) Go to System Preferences > Centrify > [ Uninstall ]
(4) The system will be unbound from the domain and agent software removed.
- AD users will not be able to login (though any local home folders will still be present on the system)
- Local accounts should be unaffected.
Hope that helps and let me know how your Time Machine restore goes for you.
10-30-2015 12:06 PM
Hey Brian, so our macs do not have the option you stated in #4 so I'm stuck with using the command line to uninstall.
sudo /bin/sh /usr/share/centrifydc/bin/uninstall.sh
This has been working fine except on one system which is giving me the below error. We're trying to remove Centrify completely out of our environment and it's been a literal nightmare...
2013-12-10 07:56:49 ### running preflight script 2013-12-10 07:56:49 Centrify not installed, performing a clean installation 2013-12-10 07:56:49 adlicense mode: N 2013-12-10 07:56:49 ### running postflight script 2013-12-10 07:56:49 adinfo (CentrifyDC 5.1.1-920) now installed adding /usr/bin/dzsh to /etc/shells ... 2013-12-10 07:56:49 Backing up original tokend 2013-12-10 07:56:49 Untaring new tokend to /System/Library/Security/tokend 2013-12-10 07:56:49 Enforcing correct ownership on /System/Library/Security/tokend 2013-12-10 07:56:49 Backing up original pcscd 2013-12-10 07:56:49 Untaring new pcscd to /usr/sbin 2013-12-10 07:56:49 Enforcing correct ownership on /usr/sbin/pcscd 2013-12-10 07:56:49 enabling dsplugin dscl -raw /Search -append / dsAttrTypeStandard:CSPSearchPath '/CentrifyDC/Default' Centrify DirectControl DirectoryService plugin activated 2013-12-10 07:56:49 restarting dsplugin System Cache flushed 2013-12-10 07:56:49 displaying warning 2013-12-10 07:56:49 set adlicense mode The mode is express. uninstall.sh ************** rev = 2013.2 (5.1.1-919) ***************** Fri 30 Oct 2015 14:14:54 EDT INFO: Full Mac OS version: 10.10.3 ERROR: unknown OS revision: 10.10. Exiting... Error detected. Exiting ... EXIT CODE: 29
10-30-2015 12:21 PM
The output shows that the machine running OS X 10.10.3, but it's running a much older version of the Centrify agent - version 5.1.1-920.
The minimum compatible version of the Centrify agent for OS X Yosemite is 5.2.1-351, which is why this uninstaller is coming back with "unknown OS revision".
Please try this:
(1) Login to the target Mac as Local Admin and download the attached zip and extract the uninstall.sh script.
-(This uninstaller was extracted from a 5.2.1 agent)
(2) Replace the existing uninstall script on the Mac:
(3) Open the Terminal and run:
sudo chmod +x /usr/share/centrifydc/bin/uninstall.sh sudo sh /usr/share/centrifydc/bin/uninstall.sh
Let me know if this works for you.
12-15-2016 08:42 PM
Hi, I have the same problem with newer version of Mac OS
Detecting local platform ...
ERROR: unknown OS revision: 10.12. Exiting...
I tried the file you attached and still didn't work. Can you send a new unstall script? Thanks!
12-16-2016 05:30 PM
Hi Sejohnwu, How do I check Centrify version on my mac? Yes, I have problem uninstalling centrify - see the error listed in my previous message. I have MacOS Sierra 10.12.1.