October 2011 - SmartcardServices-Users

Smart Card Login in OS X 10.6.8
by Thomas Eyre 26 Oct '11

26 Oct '11

I am having trouble enabling smart card login for local users in OS X 10.6.8. I have been able to enable this feature in the past, but now the login window just blinks when I insert my token and I am not prompted for my PIN. I believe my authorization file is correct based on Apple's article for enabling smart card login (http://support.apple.com/kb/TA24244) Specifically, I am using sc_auth to add my certificate's public key hash to the local user's directory record as described in the article. Has support for smart card login been removed from OS X 10.6 as well? Thank you in advance for any help you can provide.

1 0

OpenPGP card and OS X Lion
by Nicholas Cole 25 Oct '11

25 Oct '11

Has anyone managed to get the OpenPGP card working on OS X Lion? I managed to get it to work under previous releases, but I've had no luck so far since Lion came out... Best wishes, Nicholas

1 0

Oberthur ID One 128 v5.5 Dual CAC
by Mike McNeil 12 Oct '11

12 Oct '11

Oberthur ID One 128 v5.5 Dual CAC This URL discusses the issue and has downloads to activate these cards on both Mac and PC. I have tested the Mac download and it works perfectly. http://militarycac.com/oberthur.htm https://militarycac.com/noactivclientwindows7.htm "I don't want to play golf. When I hit a ball, I want someone else to go chase it." - Rogers Hornsby

1 0

Smart Card Login for Lion
by John Billings 11 Oct '11

11 Oct '11

The Smart Card Services install works great for me on Lion, but smart card login seems to be broken. Has anyone documented how to modify the /etc/authorization file to enable support for smart card login again? It even seems to be broken with the latest update of Snow Leopard. Thanks in advance.

2 1

two observed Snow Leopard anomalies relating to PKI/smartcard/certs
by David Emery 04 Oct '11

04 Oct '11

This should not be construed as a complaint (or a bug report), I'm still trying to understand these (operating system is Snow Leopard fully patched): 1. With PKard 1.1 installed, it seems that I cannot log onto my account if it's FileVault protected. I get something like 'account not available'. Removing the card and rebooting fixes that problem. 2. In Mail.app, if I get an email from someone whose Cert depends on a DoD Intermediate Cert that is not loaded in Keychain.app (e.g. CA-25), the message is marked as 'not trusted'. If I click on that box and tell Mail "always trust this cert", both Mail.app and Keychain.app hang. This generally messes up the machine sufficiently that a reboot is necessary. Has anyone else observed these? dave

3 2