Re: [Fed-Talk] Fixing SmartCard support in MacOSX
Re: [Fed-Talk] Fixing SmartCard support in MacOSX
- Subject: Re: [Fed-Talk] Fixing SmartCard support in MacOSX
- From: Basil Decina <email@hidden>
- Date: Fri, 26 Sep 2008 09:39:22 -0400
Weird. for me (on 10.5.5 and 10.5.4 before), both values are saved.
For grins, I deleted the ID preference and recreated it but the effect
was the same.
Basil
On Sep 26, 2008, at 9:34 AM, Boyd Fletcher wrote:
not on the 3 boxes we have tried it on. changes to the location
value don’t change. name changes though
On 9/26/08 9:31 AM, "Basil Decina" <email@hidden> wrote:
Is there a problem with double-clicking the ID preference, editing it
and then saving the changes ?
The changes appear to be saved.
Basil
On Sep 25, 2008, at 6:48 PM, Fletcher, Boyd C. CIV US USJFCOM JFL
J9935 wrote:
> Delete then recreate. We can't edit the location value on our boxes
>
> boyd
>
> Boyd Fletcher
> Chief Engineer/Technical Manager CDCIE JCTD
> O: 757.203.3290
> M: 757.771.7084
> Email: email@hidden (NEW!)
>
> --------------------------
> Sent using BlackBerry
>
>
> ----- Original Message -----
> From: email@hidden <email@hidden>
> To: Fletcher, Boyd C. CIV US USJFCOM JFL J9935
> Cc: Mueller, David S CIV SSC San Diego, 2872
> <email@hidden>; Apple Fed Talk <email@hidden
>
> Sent: Thu Sep 25 18:34:48 2008
> Subject: Re: [Fed-Talk] Fixing SmartCard support in MacOSX
>
> Another thing that bugs me, that perhaps someone has figured out,
is
> how to edit Identity Preferences?
>
> On Sep 25, 2008, at 1823 , Fletcher, Boyd C. CIV US USJFCOM JFL
J9935
> wrote:
>
>> it would be nice if they were consistent with their own
guidelines :)
>>
>>
>>
>> On 9/25/08 1:04 PM, "Mueller, David S CIV SSC San Diego, 2872"
>> <email@hidden> wrote:
>>
>>>>> 2. Add "File->New Identity Preference" to the KeyChain menu.
>>>>> Burying
>>> it by right clicking on a
>>>>> certificate is not very user friendly.
>>>
>>> Having something only available via a contextual menu violates
>>> Apple's
>>> Human Interface Guidelines:
>>>
>>> "Always ensure that contextual menu items are also available as
menu
>>> commands. A contextual menu is hidden by default and a user might
>>> not
>>> know it exists, so it should never be the only way to access a
>>> command.
>>> In particular, you should not use a contextual menu as the only
way
>>> to
>>> access an advanced or power-user feature."
>>>
>>> http://developer.apple.com/documentation/UserExperience/Conceptual/Apple
>>> HIGuidelines/XHIGMenus/chapter_17_section_5.html#//apple_ref/doc/
>>> uid/TP3
>>> 0000356-TPXREF113
>>>
>>> - David
>>>
>>> -----Original Message-----
>>> From: Boyd Fletcher
>>> Sent: Tuesday, September 23, 2008 6:59 AM
>>> To: email@hidden
>>> Subject: [Fed-Talk] Fixing SmartCard support in MacOSX
>>>
>>>
>>> Judging by all the email still circulating on CAC/PIV support in
>>> MacOS
>>> X, its pretty clear that its not working reliably and the process
>>> to get
>>> it working is far from intuitive for normal users.
>>>
>>> Some suggestions based on my experiences and several others in
the
>>> office.
>>>
>>> 1. add ability to do wildcards or better yet make the software
>>> assume
>>> all URLs derived from the base URL provided will use that
>>> certificate
>>> (you could have a check box for that). finding the exact URL
is not
>>> something most users will get right and is certainly not user
>>> friendly.
>>>
>>> 2. Add "File->New Identity Preference" to the KeyChain menu.
>>> Burying it
>>> by right clicking on a certificate is not very user friendly.
>>>
>>> 3. Add a right click setting in Safari and a menu option to set
the
>>> "ID
>>> Preference" for a website for the current URL
>>>
>>> 4. In "New Id Preference" dialog, you can't tell which CAC
>>> certificate
>>> is which. users need to be able to tell which is ID, email sign,
>>> email
>>> encrypt.
>>>
>>> 5. Better yet, provide a UI in Safari to so that users can manage
>>> URLs
>>> that require certificates and provide a mechanism to assign which
>>> certificate to use for that web site. Certificates would then be
>>> sent to
>>> that web site regardless of whether or not it asks so long as
https
>>> is
>>> used. If this UI updates the Key Chain then thats even better.
>>>
>>> boyd
>>> _______________________________________________
>>> Do not post admin requests to the list. They will be ignored.
>>> Fed-talk mailing list (email@hidden)
>>> Help/Unsubscribe/Update your Subscription:
>>>
>>> This email sent to email@hidden
>>>
>>
>> _______________________________________________
>> Do not post admin requests to the list. They will be ignored.
>> Fed-talk mailing list (email@hidden)
>> Help/Unsubscribe/Update your Subscription:
>>
>> This email sent to email@hidden
>
> _______________________________________________
> Do not post admin requests to the list. They will be ignored.
> Fed-talk mailing list (email@hidden)
> Help/Unsubscribe/Update your Subscription:
>
> This email sent to email@hidden
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden