Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >
article

KB-5791: Unable to install applications as local admin after installing OS X El Capitan

Centrify Identity Service, Mac Edition ,  

12 April,16 at 10:57 AM

Applies to: Centrify Identity Service - Mac Edition

Issue:

After installing OS X El Capitan, users (including local administrator accounts) may be unable to install applications.

The GUI admin prompt (used for unlocking System Preference padlocks, etc.) disappears and appears to do no further action.


Cause:

This appears to be a bug in OS X 10.11, see the following thread for more info: This may also occur when an older, incompatible version of Centrify DirectControl is installed, and is not upgraded to Centrify DirectControl version 5.3.0 prior to the upgrade of OS X 10.11 El Capitan.

Note 1: Centrify DirectControl should always be upgraded before upgrades to Mac OS X take place.
Note 2: It only appears to affect the GUI prompt, as Local Admin users are still able to run sudo commands at the Terminal


Workaround:

Option 1:
  • According to the Apple Developer thread above, this issue may be corrected by regenerating a fresh auth.db from /System/Library/Security/authorization.plist
    1. Login to the Mac as Local Admin
    2. Open the Terminal and run:
      • sudo mv /var/db/auth.db /var/db/auth.db.old
    3. Restart the Mac and test the admin prompt
  • (Note: This workaround has not yet been verified by Centrify Support)



Option 2:
  • Updating the Centrify agent via command line may also restore the auth.db database.
    1. Login to the Mac as Local Admin
    2. Download the TGZ version of the 5.3.0 Centrify for Mac agent installer:
    3. Unpack the package, there will be an install.sh script as part of the TGZ package.
    4. Open the Terminal and navigate to the install script location.
    5. Run as root:
      • ./install.sh
    6. Restart the Mac and the GUI prompts should now be restored

Still have questions? Click here to log a technical support case, or collaborate with your peers in Centrify's Online Community.