"No user interaction allowed" on Mojave

the reissueKey.sh is not working in 10.14.x Mojave, completing with an error:

Script result: Prompting <user> for their login password.
8:364: execution error: No user interaction allowed. (-1713)
User Canceled

I attempted to add sudo -u ${userName} before the osascript call https://github.com/jamf/FileVault2_Scripts/blob/master/reissueKey.sh#L139 but that did not work.

[salsify-it]

I would like to know the resolution as well

JAMF support recommended using this script: https://github.com/homebysix/jss-filevault-reissue. I made a couple of changes, one was to remove the LOGO because I didn't want to send out an image to all our users. Ultimately, the script worked fine and requires two inventory updates. You can have the users run sudo jamf recon to force a second inventory update otherwise you will have to wait until the next day as JAMF doesn't allow setting an inventory update period of less than 1 day.

[trice81384]

This can be fixed by adding "/bin/launchctl asuser $userName" before the oascripts calls. I''d make a pull request but there's some other issues I want to work out first.

[ooshnoo]

This can be fixed by adding "/bin/launchctl asuser $userName" before the oascripts calls. I''d make a pull request but there's some other issues I want to work out first.

Where exactly do you add "/bin/launchctl asuser $userName".

I added it before https://github.com/jamf/FileVault2_Scripts/blob/master/reissueKey.sh#L139 and it still didn't work.

[trice81384]

@ooshnoo I added it before all of the AppleScript calls. Basically before anything that starts with "/usr/bin/osascript"
I did find that I got better results by using the User's id instead of the user name but you just have to get that first. Something like userID=$(id -u "$userName")
Then just change userName to userID