Error: Password reset for {account} was not successful

[icsy7867]

I am testing out the LAPS.sh script. I have the extension attribute in place and have manually created {account} on the machine.

I manually run the policy with the script and I receive:

Running LAPS...
Current password not available, proceeding with forced update for {account}
Verify new password for {account}
Error: Password reset for {account} was not successful

Not quite sure where to look for troubleshooting. Do you have any suggestions?

[icsy7867]

The above log was from the LAPS log created by the script. However the jamf.log in /var/log says that the current account do not have the appropriate privileges.

The API account was set as a full admin with all boxes checked for testing. The JSS local admin account should also have all the appropriate permissions as well. Let me know if you have any ideas!

[phredman]

I ended up hardcoding the api user and pass in the script, not via parameters. That seemed to work well for me, @icsy7867.