- Code: Select all
/Volumes/Preboot/[long string here]/var/db/AdminUserRecoveryInfo.plist
The anonymized plist file. There is a reference for the admin user and one general user (there is only one user defined on this system)
- Code: Select all
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>admin</key>
<dict>
<key>AuthenticationAuthority</key>
<array>
<string>;ShadowHash;HASHLIST:<SALTED-SHA512-PBKDF2></string>
<string>;Kerberosv5;;admin@[long string here]</string>
</array>
<key>GeneratedUID</key>
<string>[UID here]</string>
</dict>
<key>[username]</key>
<dict>
<key>AuthenticationAuthority</key>
<array>
<string>;ShadowHash;HASHLIST:<SALTED-SHA512-PBKDF2></string>
<string>;Kerberosv5;;[username]@[long string here]</string>
</array>
<key>GeneratedUID</key>
<string>[UID here]</string>
</dict>
</dict>
</plist>