Issue Description
Packages attempting to be installed from policies in Jamf Pro whether automatically or through Self Service fail with an error similar to: "The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance. Authorization is required to install the packages" in the policy logs.
Due to third party software or applications that can make changes to the /var/db/auth.db file, sometimes these changes can cause this error to occur in a sysdiagnose and install.log file. This should be the error you will see in the install.log file for a package that failed to install.
PackageKit: Install rejected with error:
Error Domain=PKInstallErrorDomain Code=100 "Authorization is required to install the packages." UserInfo={NSLocalizedDescription=Authorization is required to install the packages.}
In my findings, the software in question was Admin By Request (ABR) which is used to elevate user permissions.
Troubleshooting Steps
Recreate the /var/db/auth.db file by renaming it and restarting. This will restore default auth settings to macOS and should allow package installations through Jamf policies to succeed again.
Run the following command in Terminal to rename the file:
mv /Volumes/Macintosh\ HD/var/db/auth.db /Volumes/Macintosh\ HD/var/db/auth.db.bakRestart the computer, login, and test installing packages through policies again.
Please note: If Jamf Connect is being utilized, this will reset the login window and it will need to be re-enabled again with: sudo authchanger -reset -jamfconnect