February 2015 - SmartcardServices-Users

Re: [SmartcardServices-Users] [Fed-Talk] CAC-enabled login OS X10.7 & 10.8
by Shawn Geddis 02 Nov '16

02 Nov '16

Michael, All Smart Card related questions should be communicated on Apple's SmartCardServices Project Lists over at MacOSForge.org. A brief debunking of misinformation previously shared on this thread... There are three methods for associating a Smart Card to a given user account in either the local or remote DS. PubKey Hash - Default method used by OS X and requires sc_auth Attribute Matching - requires /etc/cacloginconfig.plist PKINIT - requires /etc/cacloginconfig.plist and Mac bound to a KDC All methods require that the smartcard-sniffer line be present in /etc/authorization for catching the Smart Card and gathering the PIN for the associated Challenge Response with the card for use of the Private Key on the card. Tokend modules no longer ship with OS X (as of OS X Lion), but are freely available for 10.7, 10.8 from Apple's SmartCardServices project at MacOSForge. This is why nothing happens when you insert a reader / card on a vanilla install of OS X Lion or higher. ALL other components of SmartCard Services are present and have even been updated in released versions of OS X since OS X Lion v10.7.0. Project Site: http://smartcardservices.macosforge.org/ Installers: http://smartcardservices.macosforge.org/trac/wiki/installers There are also third-party commercially supported solutions from, for example, Centrify, charismathics and Thursby. ".....Comparing against 10.4 references these seem to indicate that smart card login is already enabled, besides the name change from smartcard-sniffer to PKINITMechanism...." No, "smartcard-sniffer" is NOT a name change for PKINITMechanism. "smartcard-sniffer" performs a swap of the login window (dynamically) and captures PIN "PKINITMechanism" performs the Apple provided PKINIT services for Login Authentication. "...Unfortunately Apple dropped support and now it is a requirement in many places, all places that supply Windows-software for this but if you use OS X you have to find your own solution..." You have the SAME functionality still offered via my installers from Apple's MacOSForge Project You have multiple commercial solutions as well as noted above: Centrify, charismathics and Thursby. Please register and redirect ALL Smart Card related questions to one of the appropriate Mailing list on MacOSForge. http://lists.macosforge.org/mailman/listinfo Smart Card Users: https://lists.macosforge.org/mailman/listinfo/smartcardservices-users Smart Card Developers: https://lists.macosforge.org/mailman/listinfo/smartcardservices-dev - Shawn ______________________________________________________ Shawn Geddis geddis(a)me.com Enterprise Security Consulting Engineer, Apple geddis(a)apple.com MacOSForge: Smart Card Services Project Lead: Web: http://smartcardservices.macosforge.org/ Lists: http://lists.macosforge.org/mailman/listinfo ______________________________________________________ On Feb 19, 2013, at 1:40 PM, Michael Kluskens <mklus(a)ieee.org> wrote: > I'm well aware of the sc_auth command and on previous versions of OS X I had CAC login enabled. However, in testing an OS X Lion and an OS X Mt. Lion system, inserting the CAC card has no effect. Both systems otherwise have full CAC functionality and I used the Identity Private Key. > > I have not yet tried this on a clean system with no security configuration (disabling suid's binaries, etc.) so it is possible that both systems have been broken with regards to CAC login. > > I was hoping someone could actually confirm what setup works on OS X 10.7 & 10.8 because at present the discussed information has not worked for me. > > Looking at /etc/authorization under system.login I see: > > builtin:policy-banner > loginwindow:login > builtin:reset-password,privileged > builtin:forward-login,privileged > builtin:auto-login,privileged > builtin:authenticate,privileged > PKINITMechanism:auth,privileged > loginwindow:success > HomeDirMechanism:login,privileged > HomeDirMechanism:status > MCXMechanism:login > loginwindow:done > > and under authenticate I see: > > builtin:authenticate > builtin:reset-password,privileged > builtin:authenticate,privileged > PKINITMechanism:auth,privileged > > Comparing against 10.4 references these seem to indicate that smart card login is already enabled, besides the name change from smartcard-sniffer to PKINITMechanism. > > Michael > >> From: "Danberry, Michael J Mr ARMY GUEST USA" <michael.danberry(a)us.army.mil> >> The specific location for this information is at: http://militarycac.com/errors2.htm#OTHER_QUESTIONS. Question 2 > >> From: "Bomar, Matt W ERDC-RDE-ITL-MS Contractor" <Matthew.W.Bomar(a)erdc.dren.mil> >> >> Have you looked at the "sc_auth" command? It should allow you to associate >> a certificate with a local user account for CAC login. It's still present >> in 10.8. >> >> On 2/14/13 4:30 PM, "Michael Kluskens" <mklus(a)ieee.org> wrote: >> >>> What are the choices for CAC enabled login on OS X 10.7 & 10.8. >>> >>> I'm looking at OS X systems which may not have access to a MS Domain >>> Server, i.e. isolated network. Some would have access and some would not >>> have access all the time. >>> >>> I thought maybe some changes to /etc/authorization might reenable >>> CAC-login but I haven't started an attempt yet. >>> >>> Unfortunately Apple dropped support and now it is a requirement in many >>> places, all places that supply Windows-software for this but if you use >>> OS X you have to find your own solution.

2 1

OS X 10.9 Smart Card Logon But No PKINIT
by Brown, Alexander [USA] 23 Apr '15

23 Apr '15

Hello, I have smart card logon working with Mac OS X 10.9 to a Windows Active Directory domain by using cacloginconfig.plist and mapping based on the NT Principal Name. So this is working ok but when I took a look at the traffic between the Mac and the Windows domain I noticed there wasn't any Kerberos traffic and PKINIT isn't being used. Does anyone have PKINIT working with OS X 10.9 and if so can you share some steps on how that is configured? When I have my smart card in and run "kinit -C KEYCHAIN: -D KEYCHAIN: --windows --pk-enterprise" I got the error "kinit: krb5_pk_enterprise_certs: Failed to find PKINIT certificate: Certificate not found". The smart card I am using for this is the DoD CAC. Also one other question, does anyone know if any certificate revocation checking takes place on the Mac during smart card logon? Alex Brown Associate Booz | Allen | Hamilton ________________________________ brown_alexander2(a)bah.com<mailto:brown_alexander2@bah.com>

4 8

Cannot use my Yubikey Neo
by Thomas Westfeld 05 Mar '15

05 Mar '15

Hello everyone, I am proud owner of a new Yubikey NEO firmare 3.3.0, with CCID mode enabled. I am having problems getting it to work, e.g. showing the certificates of the yubikey in my keychain. I have installed the latest Smartcard services for Mac OS 10.9. on my MacBookAir with PIV tokend installed. I am currently running 10.9.5. on it. First of all, wenn I attach the yubikey, my console shows the following: 01.02.15 22:44:08,127 UserEventAgent[11]: assertion failed: 13F34: com.apple.telemetry + 16493 [AE0C3032-1747-317E-9871-E26B5B6B0120]: 0xffffffffe00002ed 01.02.15 22:44:08,803 com.apple.SecurityServer[15]: Token reader Yubico Yubikey NEO OTP+CCID 00 00 inserted into system 01.02.15 22:44:09,207 com.apple.SecurityServer[15]: token in reader Yubico Yubikey NEO OTP+CCID 00 00 cannot be used (error 229) That does not sound too well. I then restarted the pcscd with the —debug and —apdu flag and reattached the yubikey. this is the lengthy output shown at the end of the post. Now my noob question: what can I do next? It does not seem to work or am I missing something here? Thanks in advance, Thomas Westfeld Output of the pcscd with —debug after inserting my Yubikey NEO SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/readerfactory.c:772:RFInitializeReader() Attempting startup of Yubico Yubikey NEO OTP+CCID 00 00 using /usr/libexec/SmartCardServices/drivers/ifd-ccid.bundle /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/readerfactory.c:498:RFBindFunctions() Binding driver functions /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/readerfactory.c:634:RFBindFunctions() Loading IFD Handler 3.0 /SourceCache/SmartcardCCID/SmartcardCCID-55005/ccid/ccid/src/ifdhandler.c:1532:init_driver() Driver version: 1.3.11 Card ATR: 3B FC 13 00 00 81 31 FE 15 59 75 62 69 6B 65 79 4E 45 4F 72 33 E1 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg_srv.c:217:SHMProcessEventsServer() Common channel packet arrival /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg_srv.c:226:SHMProcessEventsServer() SHMProcessCommonChannelRequest detects: 6 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/pcscdaemon.c:253:SVCServiceRunLoop() A new context thread creation is requested: 6 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_svc.c:178:ContextThread() Thread is started: 6 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:119:SHMClientReadMessage() SHMClientReadMessage: Issuing read for 48 bytes (header) /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:500:SHMMessageReceive() SHMMessageReceive errno: 0x00000000: no error /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:501:SHMMessageReceive() SHMMessageReceive retval: 0x00000000, bytes read: 48 <== SHMMessageReceive: 12 34 56 78 00 00 00 3C 00 00 00 F8 00 00 00 5B 00 00 00 5B 00 00 00 F8 54 CE 9F 2A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:122:SHMClientReadMessage() SHMClientReadMessage: read message header error: 0x00000000 [0x00000000] /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:148:SHMClientReadMessage() SHMClientReadMessage: Issuing read for 12 bytes /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:500:SHMMessageReceive() SHMMessageReceive errno: 0x00000000: no error /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:501:SHMMessageReceive() SHMMessageReceive retval: 0x00000000, bytes read: 12 <== SHMMessageReceive: 00 00 00 03 00 00 00 00 8F 1C 3B 10 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:153:SHMClientReadMessage() SHMClientReadMessage: read message body error: 0x00000000 [0x00000000] /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg_srv.c:293:SHMProcessEventsContext() correctly processed client: 6 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_svc.c:242:ContextThread() Client is protocol version 3:0 ==> SHMMessageSend: 12 34 56 78 00 00 00 3C 00 00 00 F8 00 00 00 5B 00 00 00 5B 00 00 00 F8 54 CE 9F 2A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 00 00 00 00 00 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:119:SHMClientReadMessage() SHMClientReadMessage: Issuing read for 48 bytes (header) /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:500:SHMMessageReceive() SHMMessageReceive errno: 0x00000000: no error /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:501:SHMMessageReceive() SHMMessageReceive retval: 0x00000000, bytes read: 48 <== SHMMessageReceive: 12 34 56 78 00 00 00 3C 00 00 00 F1 00 00 00 5B 00 00 00 5B 00 00 00 01 54 CE 9F 2A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:122:SHMClientReadMessage() SHMClientReadMessage: read message header error: 0x00000000 [0x00000000] /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:148:SHMClientReadMessage() SHMClientReadMessage: Issuing read for 12 bytes /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:500:SHMMessageReceive() SHMMessageReceive errno: 0x00000000: no error /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:501:SHMMessageReceive() SHMMessageReceive retval: 0x00000000, bytes read: 12 <== SHMMessageReceive: 00 00 00 02 00 00 00 00 00 00 00 00 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:153:SHMClientReadMessage() SHMClientReadMessage: read message body error: 0x00000000 [0x00000000] /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg_srv.c:293:SHMProcessEventsContext() correctly processed client: 6 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard.c:199:SCardEstablishContext() Establishing Context: 16997687 [0x01035D37] ==> SHMMessageSend: 12 34 56 78 00 00 00 3C 00 00 00 F1 00 00 00 5B 00 00 00 5B 00 00 00 01 54 CE 9F 2A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 01 03 5D 37 00 00 00 00 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:119:SHMClientReadMessage() SHMClientReadMessage: Issuing read for 48 bytes (header) /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:500:SHMMessageReceive() SHMMessageReceive errno: 0x00000000: no error /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:501:SHMMessageReceive() SHMMessageReceive retval: 0x00000000, bytes read: 48 <== SHMMessageReceive: 12 34 56 78 00 00 00 7C 00 00 00 F1 00 00 00 5B 00 00 00 5B 00 00 00 04 54 CE 9F 2A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:122:SHMClientReadMessage() SHMClientReadMessage: read message header error: 0x00000000 [0x00000000] /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:148:SHMClientReadMessage() SHMClientReadMessage: Issuing read for 76 bytes /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:500:SHMMessageReceive() SHMMessageReceive errno: 0x00000000: no error /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:501:SHMMessageReceive() SHMMessageReceive retval: 0x00000000, bytes read: 76 <== SHMMessageReceive: 01 03 5D 37 59 75 62 69 63 6F 20 59 75 62 69 6B 65 79 20 4E 45 4F 20 4F 54 50 2B 43 43 49 44 20 30 30 20 30 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 00 00 00 00 00 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:153:SHMClientReadMessage() SHMClientReadMessage: read message body error: 0x00000000 [0x00000000] /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg_srv.c:293:SHMProcessEventsContext() correctly processed client: 6 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_svc.c:376:MSGFunctionDemarshall() SCardConnect hContext: 0x01035D37, phCard: 0x00000000 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard.c:253:SCardConnect() Attempting Connect to Yubico Yubikey NEO OTP+CCID 00 00 using protocol: 3 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/prothandler.c:158:PHSetProtocol() Attempting PTS to T=1 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard.c:398:SCardConnect() Active Protocol: T=1 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard.c:408:SCardConnect() hCard Identity: 15df9 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_svc.c:380:MSGFunctionDemarshall() SCardConnect result: 0 [0x00000000] /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_svc.c:386:MSGFunctionDemarshall() MSGAddHandle result: 0 [0x00000000] ==> SHMMessageSend: 12 34 56 78 00 00 00 7C 00 00 00 F1 00 00 00 5B 00 00 00 5B 00 00 00 04 54 CE 9F 2A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 03 5D 37 59 75 62 69 63 6F 20 59 75 62 69 6B 65 79 20 4E 45 4F 20 4F 54 50 2B 43 43 49 44 20 30 30 20 30 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 03 00 01 5D F9 00 00 00 02 00 00 00 00 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:119:SHMClientReadMessage() SHMClientReadMessage: Issuing read for 48 bytes (header) /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:500:SHMMessageReceive() SHMMessageReceive errno: 0x0000003C: Operation timed out /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:501:SHMMessageReceive() SHMMessageReceive retval: 0x00000000, bytes read: 48 <== SHMMessageReceive: 12 34 56 78 00 00 00 70 00 00 00 F1 00 00 00 5B 00 00 00 5B 00 00 00 11 54 CE 9F 2A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:122:SHMClientReadMessage() SHMClientReadMessage: read message header error: 0x00000000 [0x00000000] /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:148:SHMClientReadMessage() SHMClientReadMessage: Issuing read for 64 bytes /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:500:SHMMessageReceive() SHMMessageReceive errno: 0x0000003C: Operation timed out /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:501:SHMMessageReceive() SHMMessageReceive retval: 0x00000000, bytes read: 64 <== SHMMessageReceive: 00 01 5D F9 00 00 00 02 00 00 00 08 00 00 00 10 00 00 00 03 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 40 00 A4 04 00 0B A0 00 00 03 08 00 00 10 00 01 00 00 00 00 00 00 00 00 00 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:153:SHMClientReadMessage() SHMClientReadMessage: read message body error: 0x00000000 [0x00000000] /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg_srv.c:293:SHMProcessEventsContext() correctly processed client: 6 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_svc.c:540:MSGFunctionDemarshall() SCardTransmitExt cbSendLength: 16 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard.c:1305:SCardTransmit() Send Protocol: T=1 APDU: 00 A4 04 00 0B A0 00 00 03 08 00 00 10 00 01 00 SW: 61 11 4F 06 00 00 10 00 01 00 79 07 4F 05 A0 00 00 03 08 90 00 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard.c:1325:SCardTransmit() IFDControl_v2/IFDTransmit result: 0x00000000, received: 21 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard.c:1326:SCardTransmit() pbRecvBuffer: [0]: 0x61, [1]: 0x11 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_svc.c:582:MSGFunctionDemarshall() SCardTransmitExt pcbRecvLength: 21, size: 69 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_svc.c:584:MSGFunctionDemarshall() SCardTransmitExt SCardTransmit result: 0 [0x00000000] /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_svc.c:619:MSGFunctionDemarshall() SCardTransmitExt/SHMMessageSend one block: data: 21, total: 65 ==> SHMMessageSend: 12 34 56 78 00 00 00 71 00 00 00 F1 00 00 00 00 00 00 00 00 00 00 00 11 54 CE 9F 2A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 5D F9 00 00 00 02 00 00 00 08 00 00 00 10 07 BA 57 08 00 00 00 01 00 00 00 15 00 00 00 00 00 00 00 00 00 00 00 45 61 11 4F 06 00 00 10 00 01 00 79 07 4F 05 A0 00 00 03 08 90 00 00 00 00 00 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:119:SHMClientReadMessage() SHMClientReadMessage: Issuing read for 48 bytes (header) /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:500:SHMMessageReceive() SHMMessageReceive errno: 0x0000003C: Operation timed out /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:501:SHMMessageReceive() SHMMessageReceive retval: 0x00000000, bytes read: 48 <== SHMMessageReceive: 12 34 56 78 00 00 00 38 00 00 00 F1 00 00 00 5B 00 00 00 5B 00 00 00 07 54 CE 9F 2A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:122:SHMClientReadMessage() SHMClientReadMessage: read message header error: 0x00000000 [0x00000000] /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:148:SHMClientReadMessage() SHMClientReadMessage: Issuing read for 8 bytes /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:500:SHMMessageReceive() SHMMessageReceive errno: 0x0000003C: Operation timed out /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:501:SHMMessageReceive() SHMMessageReceive retval: 0x00000000, bytes read: 8 <== SHMMessageReceive: 00 01 5D F9 00 00 00 00 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:153:SHMClientReadMessage() SHMClientReadMessage: read message body error: 0x00000000 [0x00000000] /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg_srv.c:293:SHMProcessEventsContext() correctly processed client: 6 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard.c:822:SCardBeginTransaction() SCardBeginTransaction ending status: 0x00000000 ==> SHMMessageSend: 12 34 56 78 00 00 00 38 00 00 00 F1 00 00 00 5B 00 00 00 5B 00 00 00 07 54 CE 9F 2A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 5D F9 00 00 00 00 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:119:SHMClientReadMessage() SHMClientReadMessage: Issuing read for 48 bytes (header) /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:500:SHMMessageReceive() SHMMessageReceive errno: 0x0000003C: Operation timed out /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:501:SHMMessageReceive() SHMMessageReceive retval: 0x00000000, bytes read: 48 <== SHMMessageReceive: 12 34 56 78 00 00 00 70 00 00 00 F1 00 00 00 5B 00 00 00 5B 00 00 00 11 54 CE 9F 2A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:122:SHMClientReadMessage() SHMClientReadMessage: read message header error: 0x00000000 [0x00000000] /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:148:SHMClientReadMessage() SHMClientReadMessage: Issuing read for 64 bytes /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:500:SHMMessageReceive() SHMMessageReceive errno: 0x0000003C: Operation timed out /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:501:SHMMessageReceive() SHMMessageReceive retval: 0x00000000, bytes read: 64 <== SHMMessageReceive: 00 01 5D F9 00 00 00 02 00 00 00 08 00 00 00 10 00 00 00 03 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 40 00 A4 04 00 0B A0 00 00 03 08 00 00 10 00 01 00 00 00 00 00 00 00 00 00 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:153:SHMClientReadMessage() SHMClientReadMessage: read message body error: 0x00000000 [0x00000000] /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg_srv.c:293:SHMProcessEventsContext() correctly processed client: 6 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_svc.c:540:MSGFunctionDemarshall() SCardTransmitExt cbSendLength: 16 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard.c:1305:SCardTransmit() Send Protocol: T=1 APDU: 00 A4 04 00 0B A0 00 00 03 08 00 00 10 00 01 00 SW: 61 11 4F 06 00 00 10 00 01 00 79 07 4F 05 A0 00 00 03 08 90 00 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard.c:1325:SCardTransmit() IFDControl_v2/IFDTransmit result: 0x00000000, received: 21 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard.c:1326:SCardTransmit() pbRecvBuffer: [0]: 0x61, [1]: 0x11 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_svc.c:582:MSGFunctionDemarshall() SCardTransmitExt pcbRecvLength: 21, size: 69 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_svc.c:584:MSGFunctionDemarshall() SCardTransmitExt SCardTransmit result: 0 [0x00000000] /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_svc.c:619:MSGFunctionDemarshall() SCardTransmitExt/SHMMessageSend one block: data: 21, total: 65 ==> SHMMessageSend: 12 34 56 78 00 00 00 71 00 00 00 F1 00 00 00 00 00 00 00 00 00 00 00 11 54 CE 9F 2A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 5D F9 00 00 00 02 00 00 00 08 00 00 00 10 00 01 5D F9 00 00 00 00 00 00 00 15 00 00 00 00 00 00 00 00 00 00 00 45 61 11 4F 06 00 00 10 00 01 00 79 07 4F 05 A0 00 00 03 08 90 00 00 00 00 00 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:119:SHMClientReadMessage() SHMClientReadMessage: Issuing read for 48 bytes (header) /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:500:SHMMessageReceive() SHMMessageReceive errno: 0x0000003C: Operation timed out /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:501:SHMMessageReceive() SHMMessageReceive retval: 0x00000000, bytes read: 48 <== SHMMessageReceive: 12 34 56 78 00 00 00 6A 00 00 00 F1 00 00 00 5B 00 00 00 5B 00 00 00 11 54 CE 9F 2A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:122:SHMClientReadMessage() SHMClientReadMessage: read message header error: 0x00000000 [0x00000000] /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:148:SHMClientReadMessage() SHMClientReadMessage: Issuing read for 58 bytes /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:500:SHMMessageReceive() SHMMessageReceive errno: 0x0000003C: Operation timed out /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:501:SHMMessageReceive() SHMMessageReceive retval: 0x00000000, bytes read: 58 <== SHMMessageReceive: 00 01 5D F9 00 00 00 02 00 00 00 08 00 00 00 0A 00 00 00 03 00 00 00 71 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 3A 00 CB 3F FF 05 5C 03 5F C1 07 00 00 00 00 00 00 00 00 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:153:SHMClientReadMessage() SHMClientReadMessage: read message body error: 0x00000000 [0x00000000] /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg_srv.c:293:SHMProcessEventsContext() correctly processed client: 6 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_svc.c:540:MSGFunctionDemarshall() SCardTransmitExt cbSendLength: 10 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard.c:1305:SCardTransmit() Send Protocol: T=1 APDU: 00 CB 3F FF 05 5C 03 5F C1 07 SW: 6A 82 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard.c:1325:SCardTransmit() IFDControl_v2/IFDTransmit result: 0x00000000, received: 2 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard.c:1326:SCardTransmit() pbRecvBuffer: [0]: 0x6A, [1]: 0x82 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_svc.c:582:MSGFunctionDemarshall() SCardTransmitExt pcbRecvLength: 2, size: 50 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_svc.c:584:MSGFunctionDemarshall() SCardTransmitExt SCardTransmit result: 0 [0x00000000] /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_svc.c:619:MSGFunctionDemarshall() SCardTransmitExt/SHMMessageSend one block: data: 2, total: 46 ==> SHMMessageSend: 12 34 56 78 00 00 00 5E 00 00 00 F1 00 00 00 00 00 00 00 00 00 00 00 11 54 CE 9F 2A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 5D F9 00 00 00 02 00 00 00 08 00 00 00 0A 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 32 6A 82 3F FF 05 5C /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:119:SHMClientReadMessage() SHMClientReadMessage: Issuing read for 48 bytes (header) /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:500:SHMMessageReceive() SHMMessageReceive errno: 0x0000003C: Operation timed out /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:501:SHMMessageReceive() SHMMessageReceive retval: 0x00000000, bytes read: 48 <== SHMMessageReceive: 12 34 56 78 00 00 00 3C 00 00 00 F1 00 00 00 5B 00 00 00 5B 00 00 00 08 54 CE 9F 2A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:122:SHMClientReadMessage() SHMClientReadMessage: read message header error: 0x00000000 [0x00000000] /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:148:SHMClientReadMessage() SHMClientReadMessage: Issuing read for 12 bytes /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:500:SHMMessageReceive() SHMMessageReceive errno: 0x0000003C: Operation timed out /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:501:SHMMessageReceive() SHMMessageReceive retval: 0x00000000, bytes read: 12 <== SHMMessageReceive: 00 01 5D F9 00 00 00 00 00 00 00 00 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:153:SHMClientReadMessage() SHMClientReadMessage: read message body error: 0x00000000 [0x00000000] /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg_srv.c:293:SHMProcessEventsContext() correctly processed client: 6 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard.c:881:SCardEndTransaction() Status: 0x00000000 ==> SHMMessageSend: 12 34 56 78 00 00 00 3C 00 00 00 F1 00 00 00 5B 00 00 00 5B 00 00 00 08 54 CE 9F 2A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 5D F9 00 00 00 00 00 00 00 00 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:119:SHMClientReadMessage() SHMClientReadMessage: Issuing read for 48 bytes (header) /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:500:SHMMessageReceive() SHMMessageReceive errno: 0x0000003C: Operation timed out /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:501:SHMMessageReceive() SHMMessageReceive retval: 0x00000000, bytes read: 48 <== SHMMessageReceive: 12 34 56 78 00 00 00 3C 00 00 00 F1 00 00 00 5B 00 00 00 5B 00 00 00 06 54 CE 9F 2A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:122:SHMClientReadMessage() SHMClientReadMessage: read message header error: 0x00000000 [0x00000000] /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:148:SHMClientReadMessage() SHMClientReadMessage: Issuing read for 12 bytes /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:500:SHMMessageReceive() SHMMessageReceive errno: 0x0000003C: Operation timed out /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:501:SHMMessageReceive() SHMMessageReceive retval: 0x00000000, bytes read: 12 <== SHMMessageReceive: 00 01 5D F9 00 00 00 00 00 00 00 00 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:153:SHMClientReadMessage() SHMClientReadMessage: read message body error: 0x00000000 [0x00000000] /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg_srv.c:293:SHMProcessEventsContext() correctly processed client: 6 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard.c:720:SCardDisconnect() Active Contexts: 1 ==> SHMMessageSend: 12 34 56 78 00 00 00 3C 00 00 00 F1 00 00 00 5B 00 00 00 5B 00 00 00 06 54 CE 9F 2A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 5D F9 00 00 00 00 00 00 00 00 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:119:SHMClientReadMessage() SHMClientReadMessage: Issuing read for 48 bytes (header) /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:461:SHMMessageReceive() SHMMessageReceive: peer closed the socket /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:500:SHMMessageReceive() SHMMessageReceive errno: 0x0000003C: Operation timed out /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:501:SHMMessageReceive() SHMMessageReceive retval: 0xFFFFFFFF, bytes read: 0 <== SHMMessageReceive: /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg.cpp:122:SHMClientReadMessage() SHMClientReadMessage: read message header error: 0xFFFFFFFF [0xFFFFFFFF] /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_msg_srv.c:282:SHMProcessEventsContext() Client has disappeared: 6 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard_svc.c:199:ContextThread() Client die: 6 /SourceCache/SmartCardServices_Executables/SmartCardServices-55111/src/PCSC/winscard.c:210:SCardReleaseContext() Releasing Context: 16997687

5 20

Store key on NFC tag that is acceptable to sc_auth?
by Henrik Brautaset Aronsen 02 Feb '15

02 Feb '15

Is it possible to generate a key and store it on an NFC tag, so that it shows up with "sc_auth hash"? I'm trying to login to OSX using NFC using info from http://support.apple.com/kb/TA24244. The tag I have is a 13.56MHz ISO14443A & NFC Type 2 compliant NTAG216 RFID chipset, and I'm using a ACS ACR122T USB reader. Here's some output from "system.log": 17/01/15 21:04:28,005 com.apple.SecurityServer[71]: reader ACS ACR122U: state changed 16 -> 34 17/01/15 21:04:30,066 com.apple.SecurityServer[71]: token in reader ACS ACR122U cannot be used (error 229) 17/01/15 21:04:33,567 com.apple.SecurityServer[71]: reader ACS ACR122U: state changed 32 -> 18 And from "opensc-tool -l -v": # Detected readers (pcsc) Nr. Card Features Name 0 Yes ACS ACR122U 3b:8f:xx:yy:zz Unsupported card Best regards, Henrik

4 14