keychainreset.sh

#!/bin/bash

########################################################################
# Created By: Andrina Kelly, andrina.kelly@bellmedia.ca, Ext 4995
# Creation Date: July 2013
# Last modified: November 19, 2015 - Matthew Bodaly - Updated the method to create user variable.
# Brief Description: Deletes the users login.keychain, and creates a new keychain
########################################################################

#Check that Cocoa Dialog and Terminal Notifier Exist, install if needed.
echo "Checking for Cocoa Dialog and Terminal Notifier..."
if [ ! -e /Library/Application\ Support/caspersupport/cocoaDialog.app/Contents/MacOS/cocoaDialog ]; then
	echo "Cocoa Dialog Missing - Triggering installalerts"
	jamf policy -trigger installalerts
elif [ ! -e /Library/Application\ Support/caspersupport/terminal-notifier.app/Contents/MacOS/terminal-notifier ]; then
	echo "Terminal Notifier Missing - Triggering installalerts"
	jamf policy -trigger installalerts
else
	echo "Cocoa Dialog and Terminal Notifier are installed!"
fi

# Set CocoaDialog Location
CD="/Library/Application\ Support/caspersupport/cocoaDialog.app/Contents/MacOS/cocoaDialog"

#Find out who's logged in
USER=`python -c 'from SystemConfiguration import SCDynamicStoreCopyConsoleUser; import sys; username = (SCDynamicStoreCopyConsoleUser(None, None, None) or [None])[0]; username = [username,""][username in [u"loginwindow", None, u""]]; sys.stdout.write(username + "\n");'`

#Get the name of the users keychain - some messy sed and awk to set up the correct name for security to like
KEYCHAIN=`su $USER -c "security list-keychains" | grep login | sed -e 's/\"//g' | sed -e 's/\// /g' | awk '{print $NF}'`

#Go delete the keychain in question...
su $USER -c "security delete-keychain $KEYCHAIN"

#Ask the user for their login password to create a new keychain
rv=($($CD secure-standard-inputbox --title "Set New Keychain Password" --no-newline --informative-text "Enter your current login password"))
PASSWORD=${rv[1]}

#Create the new login keychain
expect <<- DONE
set timeout -1
spawn su $USER -c "security create-keychain login.keychain"

# Look for prompt
expect "*?chain:*"
# send user entered password from CocoaDialog
send "$PASSWORD\n"
expect "*?chain:*"
send "$PASSWORD\r"
expect EOF
DONE

#Set the newly created login.keychain as the users default keychain
su $USER -c "security default-keychain -s login.keychain"