Please help me Mac gurus!!!

DifferentSeedDifferentSeed Registered Users Posts: 79 Big grins
edited January 6, 2011 in Digital Darkroom
Hi folks. I need help. Need it bad. I am locked out of my Powerbook. Filevault is on. *sigh*

So, here's the situation... I can't login to my Mac (running OSX Tiger). The last time the computer "shutdown" it was in sleep mode the battery drained to zilch. Unfortunately FileVault was on. Even more unfortunate is that I had photos and videos that are truly irreplacable and include photos of people and pets which have now passed on *sniff*. I am about willing to try anything to regain access or recover those pictures, which had not been uploaded to SmugMug yet. :(

Now when I try to login I get incorrect password for the single user account setup (me). My administrator (master) password isn't working either. I am 99.9% sure I am using the correct single user password. The same applies to the master password. I never changed the master since I got it on day one. My clues are indicative of what I beleive my passwords are too. But nada.

I checked caps and tried all variations based on clues. Nothing.

Booted to the CD drive with OSX install disc in it. Ran disk utilities. A single problem with "Macintosh HD Header Information" was found. It was repaired.

Still no luck.

Booted to command shell, poked around in Unix (and had my husband do the same - he's more familiar with unix/linux). Found my disc image. It's 73Gigs. All those memories are locked away in there and I can't get at them.

So, my plea to any Mac gurus out there is for advice, ideas, recommendations - whatever. I'll try it if it doesn't permanently compromise my FileVault and those precious photos. I am not ready to give up entirely and reinstall OSX.

Any ideas?
Make a small loan, Make a big difference. Find out how at http://www.kiva.org

Comments

  • DoctorItDoctorIt Administrators Posts: 11,951 moderator
    edited February 5, 2007
    Is this machine new to you? If not, is FileVault new to you?

    Where am I going with these questions? I'm by no means a file guru, and I don't even know what FileVault is, but there's always the obvious place to try: call Mac Support. They've been helpful to me in the past.

    Good luck!
    Erik
    moderator of: The Flea Market [ guidelines ]


  • DavidTODavidTO Registered Users, Retired Mod Posts: 19,160 Major grins
    edited February 5, 2007
    I don't know much about FileVault, but I'm pretty sure of this: if you're locked out of it, you're SOL. The security on it is so tight that Apple can't help you.

    Now, if the issue is that you can't log into your user account, then you can change the user password with the install disk, I'm pretty sure. Start up off of the install disk and look around for a change password command.

    The other thing it could be, and this may sound silly, is your keyboard. A modifier key may be stuck. Try using an external keyboard on it.

    Zap your p-ram. Restart and hold down four keys right after the chime: cmd-opt-p-r.
    Let the system chime 4x before you let go.
    Moderator Emeritus
    Dgrin FAQ | Me | Workshops
  • DifferentSeedDifferentSeed Registered Users Posts: 79 Big grins
    edited February 5, 2007
    DoctorIT - No, the machine is not new to me. I bought it new about 16 months ago at Apple... I am still relatively new to Macs tho. Filevault is their drive encryption that I stupidly enabled when I upgraded to Tiger.

    DavidTO - I had not thought about the keyboard and will definately try that when I get home from work, as well as zapping the PRAM.

    As for calling Apple, I think they're gonna say SOL as well, and it'll take 24 minutes on hold to hear it... I will likely go hassle a genius at the apple store as a last resort if all else fails.

    Will post if this helps one way another :)

    Thx!
    Make a small loan, Make a big difference. Find out how at http://www.kiva.org
  • DavidTODavidTO Registered Users, Retired Mod Posts: 19,160 Major grins
    edited February 5, 2007
    Don't forget about the resetting user password thing.

    Also, you could try to access the disk via firewire target mode from another Mac?
    Moderator Emeritus
    Dgrin FAQ | Me | Workshops
  • DifferentSeedDifferentSeed Registered Users Posts: 79 Big grins
    edited February 5, 2007
    DavidTO wrote:
    Don't forget about the resetting user password thing.

    Also, you could try to access the disk via firewire target mode from another Mac?

    I'm afraid if I reset the password I'll kill/lose the filevault encryption key. The docs on apple.com are sketchy on this. This is on my list for a mac genius at apple store (or guru here?) :)

    How do I "access the disk via fireware target mode from another Mac"? There are a few people at my office here who run Macs - so I've got access to other macs, but I don't know the first thing about how to get one to talk to or see another one.
    Make a small loan, Make a big difference. Find out how at http://www.kiva.org
  • DavidTODavidTO Registered Users, Retired Mod Posts: 19,160 Major grins
    edited February 5, 2007
    I'm afraid if I reset the password I'll kill/lose the filevault encryption key. The docs on apple.com are sketchy on this. This is on my list for a mac genius at apple store (or guru here?) :)

    How do I "access the disk via fireware target mode from another Mac"? There are a few people at my office here who run Macs - so I've got access to other macs, but I don't know the first thing about how to get one to talk to or see another one.


    Restart the problem mac, and just after the startup chime, hold down "t". This starts it in firewire target mode, and can be connected to any other computer as if it were a hard disk.
    Moderator Emeritus
    Dgrin FAQ | Me | Workshops
  • LomocoLomoco Registered Users Posts: 5 Beginner grinner
    edited February 10, 2007
    Reset your master password
    DavidTO wrote:
    Restart the problem mac, and just after the startup chime, hold down "t". This starts it in firewire target mode, and can be connected to any other computer as if it were a hard disk.

    There is a better way to do it. I have discovered a way to reset the master password without knowing the original.

    1. Change your user password with the Install disk

    2. Locate this file: <Hardrive>/Library/Keychains/FileVaultMaster.keychain

    (<Hardrive> represents your hardrive whatever you call it)

    3. Delete that file

    4. Go to system preferences

    5. Click "Security"

    6. Specify your new Master Password. It has been reset for you



    If you cant access this file because permissions are wrong:
    <Hardrive>/Library/Keychains/FileVaultMaster.keychain


    1. Log-in to your account

    2. Launch Netinfo Manager in /Applications/Utilities/

    3. Click the lock at the bottom and type your password where it says to

    4. Once the lock is unlocked, go under "security" --> "Enable root user" in the menu bar (if you don't see it, then root user is already on)

    4 1/2. Close Netinfo Manager

    5. Launch Terminal

    6. type: "sudo passwd root" at the command prompt

    7. Hit enter

    8. Enter your user password (The one you set with the install disk)

    9. Specify a new password for root (One you can remember)

    9 1/2. Hit enter

    10. Re-type the password

    11. Hit enter

    12. Make sure that the "Display login window as:" is set to "Name and Password" in System Preferences --> Accounts --> Login Options. (You will need to unlock the lock)

    13. Log-out of your account

    14. At the login window, Type "root" for the user and then type your root user password that you specified in terminal in the password field

    15. Once logged in, Do this:

    1. Locate this file: <Hardrive>/Library/Keychains/FileVaultMaster.keychain
    (<Hardrive> represents your hardrive whatever you call it)

    2. Delete that file

    3. Go to system preferences

    4. Click "Security"

    5. Specify your new Master Password. It has been reset for you


    Hope that works for you! It worked with me thumb.gif


    Lomoco
    Mac_Hack Corporation


    Or you could use the firewire trick, but then you will lose your computer


    By following these instructions, you agree to the statement below:

    Mac_Hack Corporation is not responsible for any damage done to your computer from following these instructions. You accept all responsibility if damage does occur to your computer. Mac_Hack Corporation is offering these instructions as a suggestion and you follow them at your own risk. You are not obligated to follow these instructions deal.gif


    (In other words, Don't blame me if you screw up)
  • colourboxcolourbox Registered Users Posts: 2,095 Major grins
    edited February 10, 2007
    Another possibility: The new DiskWarrior 4 now "repairs and rebuilds FileVault volumes." Not sure how good it is at that, but past versions of DiskWarrior have a stellar reputation.
  • nathannathan Registered Users Posts: 20 Big grins
    edited February 11, 2007
    I am an Apple Engineer, and I think you're in a serious bind. Your best option is to try the latest Disk Warrior as stated in the last comment.

    The way file vault is implemented on Tiger is that it is an encrypted disk image. The problem is that if one bit goes wrong on the disk image it could corrupt the entire image. In your case it may have happened to the encryption/password information. If Diskwarrior can repair it, that may be your only hope.

    As I don't work on FileVault, I don't have any other specifics. You might want to take your machine to a genius bar, and see if they can do anything. If not, you may want to try a file recovery specialist. If you have the right password, there may be a chance to recover some or all of the data, maybe.

    In the future, I would say that FileVault is great for protecting personal data, but I would not store large amounts of media on it. Sorry.
    Nathan

    Nikon D200
    and a vast assortment of lenses
  • LomocoLomoco Registered Users Posts: 5 Beginner grinner
    edited February 13, 2007
    Or you could try my technique. It might not be as simple, but it works. IF it is the filevault encryption key you are afraid of losing, just reset it how I showed you. That is a major glitch in Tiger. We both have the same computers running the same operating system (10.4) so it should work for you. If it doesn't, I will strangle myself :)
  • DifferentSeedDifferentSeed Registered Users Posts: 79 Big grins
    edited February 13, 2007
    Locomo - Your suggestion sounds promising, as does Disk Warrior, but can I try your way (accessing Security, System Prefs, etc) without being able to login to the machine at all? Can that all be done from the Install CD as a starting point?

    I'm working at home today and will be attempting to get into the thing again later. :)
    Make a small loan, Make a big difference. Find out how at http://www.kiva.org
  • LomocoLomoco Registered Users Posts: 5 Beginner grinner
    edited February 14, 2007
    Locomo - Your suggestion sounds promising, as does Disk Warrior, but can I try your way (accessing Security, System Prefs, etc) without being able to login to the machine at all? Can that all be done from the Install CD as a starting point?

    I'm working at home today and will be attempting to get into the thing again later. :)

    Unfortunately, no. You will have to boot up from the install disk and reset your user password to access system preferences.


    1. Boot up your mac from the cd by restarting your computer and holding down the "c" key after you hear the start-up noise. Continue holding the "c" key until a language window appears. Select your language and press the continue arrow at the bottom.

    2. Once you see the install window, go under "Utilities" from the menu bar and choose the one that says "Password reset" or "Reset Password", or whatever it is called.

    3. Once the password utility is loaded, choose your hardrive and the user you wish to reset the password for. Reset the password with it.

    4. Once your user password is changed, restart your computer by quitting the Installer and Utility.

    5. When you come to the log-in screen, enter your new password that you got from the install disk.

    6. Once logged in to your account, reset the master password like I showed you


    That should do it thumb.gif
  • LomocoLomoco Registered Users Posts: 5 Beginner grinner
    edited February 28, 2007
    Did that work for you?
    Did my technique work for you? I can't guarantee it, but I will be doing more research on the matter. Wish I had another mac to test this stuff out on.
  • DifferentSeedDifferentSeed Registered Users Posts: 79 Big grins
    edited March 5, 2007
    Lomoco wrote:
    Did my technique work for you? I can't guarantee it, but I will be doing more research on the matter. Wish I had another mac to test this stuff out on.

    Yes and no... I got back into my puter! Yaaa! thumb.gifBut the first part of your method wasn't working. And I couldn't figure out why, so... I called Apple tech support. I don't think it was the method, and neither did they, however..

    I ended up having to talk to some advanced tech guy in security and it turned out my user database was corrupt. eek7.gif So whether I was using the correct password or not, it didn't matter, it was toast. :cry Same apparently applies to everything that's in the Filevault folder (which is still on my desktop!).

    Anyway, after much typing in Terminal and by following what the tech guy said to type and only speaking when spoke too after my first scolding about following his instructions to the "exact letter" and "nothing else" (a real people person :P) I deleted old accts and rebuilt my original with some old and some new elements (files that weren't corrupted).

    I have to backup the exsting image to another drive and will try part 2 of your method now that I'm into the machine. rolleyes1.gifBaby steps!

    Thanks, and will keep ya posted!

    - Kim
    Make a small loan, Make a big difference. Find out how at http://www.kiva.org
  • LomocoLomoco Registered Users Posts: 5 Beginner grinner
    edited March 6, 2007
    Glad to hear it
    Yes and no... I got back into my puter! Yaaa! thumb.gifBut the first part of your method wasn't working. And I couldn't figure out why, so... I called Apple tech support. I don't think it was the method, and neither did they, however..

    I ended up having to talk to some advanced tech guy in security and it turned out my user database was corrupt. eek7.gif So whether I was using the correct password or not, it didn't matter, it was toast. :cry Same apparently applies to everything that's in the Filevault folder (which is still on my desktop!).

    Anyway, after much typing in Terminal and by following what the tech guy said to type and only speaking when spoke too after my first scolding about following his instructions to the "exact letter" and "nothing else" (a real people person :P) I deleted old accts and rebuilt my original with some old and some new elements (files that weren't corrupted).

    I have to backup the exsting image to another drive and will try part 2 of your method now that I'm into the machine. rolleyes1.gifBaby steps!

    Thanks, and will keep ya posted!

    - Kim



    I am glad my technique worked for you sort of. I am glad I could help and be sure to visit homepage.mac.com/bethanyoffice/Mac_Hack%20Corporation/ for other password resetting techniques. Also, you can donate via paypal for further research on mac password bypassing. (I need another mac to test everything out on). I hope you are able to recover you're corrupted files!


    Oh, and by the way, which technique didn't work for you? Are you sure you were doing it right?

    I wish I had another computer to test this on besides my personal one. Then i will be able to work out all the bugs and such.
  • fogarthyfogarthy Registered Users Posts: 1 Beginner grinner
    edited January 4, 2011
    Lomoco wrote: »
    I am glad my technique worked for you sort of. I am glad I could help and be sure to visit homepage.mac.com/bethanyoffice/Mac_Hack%20Corporation/ for other password resetting techniques. Also, you can donate via paypal for further research on mac password bypassing. (I need another mac to test everything out on). I hope you are able to recover you're corrupted files!


    Oh, and by the way, which technique didn't work for you? Are you sure you were doing it right?

    I wish I had another computer to test this on besides my personal one. Then i will be able to work out all the bugs and such.


    Will the same technique work for snow leopard,as I have the same problem
  • DavidTODavidTO Registered Users, Retired Mod Posts: 19,160 Major grins
    edited January 4, 2011
    fogarthy wrote: »
    Will the same technique work for snow leopard,as I have the same problem

    It should.
    Moderator Emeritus
    Dgrin FAQ | Me | Workshops
  • pmbpropmbpro Registered Users Posts: 236 Major grins
    edited January 5, 2011
    I know it's a nearly 4-year-old thread resurrected, but after reading it, I wonder how the situation ended for the original poster. I hope she got it all resolved and rescued her files.
    pmb images
    Film/TV Stills Photography
    "When your work speaks for itself, don't interrupt." ~ Henry J. Kaiser
  • W.W. WebsterW.W. Webster Registered Users Posts: 3,204 Major grins
    edited January 6, 2011
    Any ideas?
    This is why you have backup! mwink.gif
Sign In or Register to comment.