Security Update 2007-004 Special Report: Login problems: users cannot login after update
Security Update 2007-004 Special Report: Login problems: users cannot login after update
Many users experience an inability login to certain, or all user accounts after applying Security Update 2007-004.
The problem may be typified by a "looping" situation where the user enters a login name and password then presses return, only to be presented with the same login window over and over.
The problem may also manifest as a display of the single user mode login prompt ("Welcome to Darwin") with the error message username:/dev/console: Operation not supported by device.
Fixes
Delete QuickTime components It appears that certain third-party QuickTime components may be interfering with login on systems that have received Security Update 2007-2004. If you have installed EyeTV or another application that places DivX QuickTime components on your system, you may want to try removing the files via one of the following routines:
1. Startup from an alternate boot volume, such as an external FireWire drive, or use another Mac to boot the problematic system in FireWire target disk mode (connect the two machines via a FireWire cable, and boot the target [problematic] system while holding down the "T" key), then navigate to the /Library/QuickTime on the problematic volume, and drag the following files to the trash:
- DivX 6 Decoder.component
- DivX Decoder.component
- DivX Encoder.component
- EyeTV MPEG Support.component
- 3ivx D4 4.5.1 for OSX
2. If you are forced into single-user mode (a text-based interface) after applying Security Update 2007-004, and don't have access to a separate startup volume, you can use the following commands at the single-user prompt to delete these files:
- rm -rf "/Library/QuickTime/DivX 6 Decoder.component"
- rm -rf "/Library/QuickTime/DivX Decoder.component"
- rm -rf "/Library/QuickTime/DivX Encoder.component"
- rm -rf "/Library/QuickTime/EyeTV MPEG Support.component"
- rm -rf "/Library/QuickTime/3ivx D4 4.5.1 for OSX"
Try restarting and check for normal login after removing these files.
You may also want to temporarily other third-party QuickTime components you find in the /Library/QuickTime/ directory.
Try booting in safe mode Restart your Mac and hold down the Shift key while the system is booting. If the system boots properly, check the /Library/StartupItems and /System/Library/StartupItems directories for potentially problematic files, then use try some of the workarounds listed below in the "Common fixes" section. Also, try deleting the appropriate .plist files as listed below in "Delete .plist files." After attempting repairs, restart your Mac and check for normal login behavior.
Run fsck If you are presented with the single user mode screen aforementioned, try running the fsck command by typing the following, then pressing return:
- /sbin/fsck -fy
If the message ***** FILE SYSTEM WAS MODIFIED ***** appears, keep typing the above command and pressing return until the message ** The volume (name of volume) appears to be OK
Change password If you can login with one administrator account but not other accounts, the first thing to try is a password change as follows:
Delete .plist files If you have an alternate means of booting the Mac in question -- e.g. a separate startup drive, or another Mac connected via FireWire target disk mode -- you can try deleting the following files from the problematic Mac's primary startup drive [the tilde (~) represents the home user directory]:
- Launch the Terminal (located in /Applications/Utilities)
- Type the command sudo username passwd
- Enter the administrator password when prompted, and subsequently the desired username password.
- Re-enter the new username password to verify.
- ~/Library/Preferences/com.apple.loginwindow.plist
- ~/Library/Preferences/loginwindow.plist
Re-install update from a separate volume Some users have been able to resolve an inability to login by re-applying Security Update 2007-004 for an alternate startup drive, via these steps:
- Download and save the appropriate copy of Security Update 2007-004 from Apple's download page but do not run the installer
- Startup from an alternate boot volume, such as an external FireWire drive, or use another Mac to boot the problematic system in FireWire target disk mode (connect the two machines via a FireWire cable, and boot the target [problematic] system while holding down the "T" key)
- Once booted from an alternate drive, select the problematic volume in the Finder, and "Get Info" -- either by pressing the Command-I keyboard combination or accessing the "Get Info" option in the File menu. Check the box marked "Ignore ownership permissions on this volume."
- Run the Security Update 2007-004 installer, selecting the original, problematic startup volume as the destination.
- Re-attempt booting from the problematic volume (hold down the option key at startup to select the desired drive)
One MacFixIt reader who had success with this workaround writes:
"After installing the Security Update 2007-004 (#2) all I got was the Darwin login and password interface. Running disk utility or the latest DiskWarrior did not help. My solution (after some 3 days of trouble shooting, since I did not want to reinstall a clean system!) was to run and reinstall the updater as a downloaded file from another computer (G4 in this case) while my 'problematic' Powermac G5 quad was booted with Command-T and connected with firewire."
Last resort: Get the update off your Mac Failing the above fixes, users may need to resort to removing Security Update 2007-004 from their Macs entirely via a process listed in our initial coverage of the update, and repeated here for convenience:
First, make a backup of your current Mac OS X installation with the Security Update applied, problematic as it may be. If there is an issue along the way, your valuable data will be safely intact in its current form.
Next, you'll need to perform an Archive and Install process to remove all of the Security Update's (and potentially problem-causing) components, and replace them with the components of a fresh copy provided by the Mac OS X disc that shipped with your system, or a retail Mac OS X disc. Unfortunately, this means you will lose some system settings and some or all third-party system add-ons.
To begin the process, insert your Mac OS X CD or DVD, as indicated above. Restart your machine and hold down the "C" key to boot from the newly inserted disc. Follow the on-screen instructions, and after accepting the license agreement, click "Options." Select "Archive and Install," and check the "Preserve User and Network Settings" option if you'd like to do so.
After the installation process is complete, you will be left with an earlier Mac OS X system that (hopefully) does not suffer from the problems generated by the Security Update. Use Software Update or Apple's download page to download the update that brings your system to a state directly prior to the Security Update
Index:
- Active Directory login issues
- AirPort connectivity issues, fixes
- Cannot connect to local servers (Error -35)
- Files in Finder cannot be renamed
- Flash playback not working
- FTP security issue
- Login problems: users cannot login after update
Resources
Apple's download page initial coverage Release notes, update reco... Common fixes Files modified by this upd... Active Directory login iss... AirPort connectivity issue... Cannot connect to local se... Files in Finder cannot be ... Flash playback not working FTP security issue Login problems: users cann... More from Late-Breakers