{"id":120988,"date":"2025-02-11T15:40:42","date_gmt":"2025-02-11T20:40:42","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&p=120988"},"modified":"2025-02-11T15:40:46","modified_gmt":"2025-02-11T20:40:46","slug":"troubleshoot-incomplete-agent-uninstall","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/troubleshoot-incomplete-agent-uninstall","title":{"rendered":"Troubleshoot: Incomplete Agent Uninstall"},"content":{"rendered":"\n
The user logins fail at the User login window and screen lock, but FileVault logins proceed as usual.<\/p>\n\n\n\n
This usually occurs when the device’s MDM enrollment is removed prior to the complete deletion of the device record in the Admin Portal. This sequence removes Full Disk Access from the JumpCloud agent, which is required to undo custom pam.d configuration on placed on the system for our service.<\/p>\n\n\n\n
When this configuration remains in place after the JumpCloud agent has been removed, all logins will fail due to the JumpCloud PAM module being required as part of the login process, but it not existing on the system.<\/p>\n\n\n\n
Modify the pam.d configuration files from macOS Recovery.<\/p>\n\n\n\n
jcagent<\/code> configuration lines from the pam.d configuration files – run each line independently:
\n\n- sed -i ‘.bak’ ‘\/jcagent\/d’ \/Volumes\/Macintosh\\ HD\/etc\/pam.d\/authorization<\/li>\n\n\n\n
- sed -i ‘.bak’ ‘\/jcagent\/d’ \/Volumes\/Macintosh\\ HD\/etc\/pam.d\/screensaver<\/li>\n\n\n\n
- sed -i ‘.bak’ ‘\/jcagent\/d’ \/Volumes\/Macintosh\\ HD\/etc\/pam.d\/screensaver_new<\/li>\n\n\n\n
- sed -i ‘.bak’ ‘\/jcagent\/d’ \/Volumes\/Macintosh\\ HD\/etc\/pam.d\/screensaver_ls<\/li>\n\n\n\n
- sed -i ‘.bak’ ‘\/jcagent\/d’ \/Volumes\/Macintosh\\ HD\/etc\/pam.d\/screensaver_new_ls
<\/li>\n<\/ul>\n<\/li>\n\n\n\n - Restart the system and log in to verify fix. Logins should proceed correctly now.<\/li>\n<\/ol>\n\n\n\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
Symptoms The user logins fail at the User login window and screen lock, but FileVault logins proceed as usual. Cause […]<\/p>\n","protected":false},"author":204,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[3161,3127],"support_tag":[],"coauthors":[2838],"acf":[],"yoast_head":"\n
Troubleshoot: Incomplete Agent Uninstall - JumpCloud<\/title>\n\n\n\n\n\n\n\n\n\n\n\t\n\t\n\t\n\n\n\t\n\t\n\t\n