I ran to view the contents of a shadow file for a user:

sudo plutil -p /var/db/dslocal/nodes/Default/users/<username>.plist

but when I get to Default it says permission denied, either as a user or root, any ideas?

  • Welcome to Ask Different. Please see How to Ask for info on writing questions that have a good chance at being correctly answered. The way your question is currently written it is difficult to understand the problem you're having. You can edit the question after reviewing the Help Center. – fsb Nov 28 '18 at 19:59
  • lets clarify, is it 10.13 or 10.14 or both – Ruskes Nov 28 '18 at 20:02
  • Go through directory services to get this info. Eg. dscl . read /Users/username AuthenticationAuthority – Allan Nov 28 '18 at 20:09
  • I just run the sudo plutil -p /var/db/dslocal/nodes/Default/users/{me}.plist and it works just fine on 10.13 – Ruskes Nov 28 '18 at 20:13
  • Duplicate of apple.stackexchange.com/a/186899/46541 – Ruskes Nov 28 '18 at 20:18

10.14 protects these files with SIP, so even root cannot access the files without using the directory services command. If you need to get this information deactivate SIP. Remember to reactivate SIP after you are finished. If you attempt to access using the directory services call shown above then you do not need to deactivate SIP.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .