Re: [Fed-Talk] Smart Card vs. System Preferences Bug
Re: [Fed-Talk] Smart Card vs. System Preferences Bug
- Subject: Re: [Fed-Talk] Smart Card vs. System Preferences Bug
- From: "Disiena, Ridley (GRC-VG00)[DB Consulting Group, Inc.]" <email@hidden>
- Date: Wed, 24 Apr 2013 06:34:41 -0500
- Acceptlanguage: en-US
- Thread-topic: [Fed-Talk] Smart Card vs. System Preferences Bug
Thanks for posting this, I had wondered if there was a work around. Terrible bug that has been around for a long time... its like they left EP PIV auth hooks in the production code but removed the functional parts so it just errors on a stub of code from an abandoned effort. Pretty bad since without that work around it makes the OS rather dysfunctional until logon or reboot.
Another one that seems not to get fixed is the certificate cache of on card certificates. If the card gets updated with new certificates, keychain uses the old cached version... it never updates the cache with the new certificates. One has to manually clear the cache with command line.
I can't believe either of these can't be fixed with a few lines of code and they have not bothered to fix them for years. It is not rocket science, I think they just gave up on us Feds.
-Ridley
On Apr 23, 2013, at 5:40 PM, Martin M. Lindner <email@hidden> wrote:
> Michael,
>
> May or not be related but I've seen the can't unlock System Preferences problem without using a Smart Card. I've found that killing the securityd process seem to correct the issue. Might want to give 'kill -HUP' a try.
>
> Marty
>
>
>
> Martin Lindner
> Principal Engineer / Information Assurance Manager
> Software Engineering Institute
> Carnegie Mellon University
> Office: +1 412 268-3107
> Email: email@hidden
> Email: email@hidden
>
>
>
>
>
>
> On Apr 23, 2013, at 5:26 PM, Michael Kluskens <email@hidden> wrote:
>
>> Has there been any progress on the Smart Card System Preferences bug?
>>
>> That's the bug where you can't unlock System Preferences on OS X 10.7 or 10.8 after using a Smart Card.
>>
>> At present we have to reboot OS X in order to unlock System Preferences, once we move completely to Smart Card login system administrators will not be able to unlock System Preferences.
>>
>> Michael
>>
>> ps. both of my previous questions to the Smart Card mailing remain unanswered and this question has nothing to do with Smart Card drivers.
>>
>>
>> _______________________________________________
>> Do not post admin requests to the list. They will be ignored.
>> Fed-talk mailing list (email@hidden)
>> Help/Unsubscribe/Update your Subscription:
>>
>> This email sent to email@hidden
>
>
> _______________________________________________
> Do not post admin requests to the list. They will be ignored.
> Fed-talk mailing list (email@hidden)
> Help/Unsubscribe/Update your Subscription:
>
> This email sent to email@hidden
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden