- SmartcardServices-Users - lists.macosforge.org

Smart Card Fixes in OS X Lion 10.7.3
by John Billings 09 Feb '12

09 Feb '12

Does anyone know exactly what was done in the recent 10.7.3 update to fix smart card login? The update summary says: "Addressed issues when using smart cards to log into OS X". That sounds promising, but a quick test after updating suggests that login is still not working the same as it used to in Snow Leopard. Does something need to be done to enable smart card login? I am glad that Apple is at least addressing this.

1 0

Are PCSC devices/tokens affected by the sandbox?
by Chris Hauser 21 Jan '12

21 Jan '12

Some applications are using USB-Cardterminals and Smartcards via PCSC. Does the Mac App Sandbox affect the functionality? -- Chris

1 0

Use of CAC card with Davmail (or Firefox) and Lion--What is the proper tokend.so file?
by De La Houssaye, Paul R CIV SPAWARSYSCEN-PACIFIC, 55360 06 Jan '12

06 Jan '12

I am trying to set up Davmail with either MacMail or Thunderbird for use with the CAC card accessing a MS Exchange server. I have an Oberthur 5.2a CAC card running Lion. DavMail starts up ok it seems. However, when I open the Mac Mail program and try to establish a connection I get a: Devmail - DavMail configuration exception: Connect exception: javax.net.ssl.SSLHandshakeException Error signing certificate verify in the log file. I am using the old /usr/libexec/SmartCardServices/pcs11/tokendPKCS11.so File for the PCS11 library in the DavMail Gateway Settings This may not be right, as this is not set up for Lion. However, I do not understand what the right file should be. I have installed the new OS X Lion SmartCardServices Installer v2.0b1 (beta) and it works very well with Safari. I have a similar problem with Firefox, however (what PKCS library file should I be using? Please help! Thanks, Paul

1 0

Oberthur Dual 5.5 CAC / OpenSC / Entourage
by Downin, David M CIV NSWCCD West Bethesda, 513 17 Nov '11

17 Nov '11

I¹m running Snow Leopard 10.6.8 on an Intel Mac Pro and have installed the OpenSC package from the MilitaryCAC website. I am able to see my certs in the keychain app now, and I am able to send and receive e-mail through Entourage 12.3.1 (connecting to OWA/WebDAV). The only thing is, it asks for my PIN constantly over and over. Has anyone else experienced this problem or know of a solution. My old CAC didn¹t ask for the PIN nearly as much as the newer one. _______________________________________________________ Dave Downin NSWC Carderock Facility Engineering and Operations Department / Code 513 9500 MacArthur Blvd. West Bethesda, MD 20817-5000 (301) 227-4873 / Work

1 0

Smart Card Login in OS X 10.6.8
by Thomas Eyre 26 Oct '11

26 Oct '11

I am having trouble enabling smart card login for local users in OS X 10.6.8. I have been able to enable this feature in the past, but now the login window just blinks when I insert my token and I am not prompted for my PIN. I believe my authorization file is correct based on Apple's article for enabling smart card login (http://support.apple.com/kb/TA24244) Specifically, I am using sc_auth to add my certificate's public key hash to the local user's directory record as described in the article. Has support for smart card login been removed from OS X 10.6 as well? Thank you in advance for any help you can provide.

1 0

OpenPGP card and OS X Lion
by Nicholas Cole 25 Oct '11

25 Oct '11

Has anyone managed to get the OpenPGP card working on OS X Lion? I managed to get it to work under previous releases, but I've had no luck so far since Lion came out... Best wishes, Nicholas

1 0

Oberthur ID One 128 v5.5 Dual CAC
by Mike McNeil 12 Oct '11

12 Oct '11

Oberthur ID One 128 v5.5 Dual CAC This URL discusses the issue and has downloads to activate these cards on both Mac and PC. I have tested the Mac download and it works perfectly. http://militarycac.com/oberthur.htm https://militarycac.com/noactivclientwindows7.htm "I don't want to play golf. When I hit a ball, I want someone else to go chase it." - Rogers Hornsby

1 0

Smart Card Login for Lion
by John Billings 11 Oct '11

11 Oct '11

The Smart Card Services install works great for me on Lion, but smart card login seems to be broken. Has anyone documented how to modify the /etc/authorization file to enable support for smart card login again? It even seems to be broken with the latest update of Snow Leopard. Thanks in advance.

2 1

two observed Snow Leopard anomalies relating to PKI/smartcard/certs
by David Emery 04 Oct '11

04 Oct '11

This should not be construed as a complaint (or a bug report), I'm still trying to understand these (operating system is Snow Leopard fully patched): 1. With PKard 1.1 installed, it seems that I cannot log onto my account if it's FileVault protected. I get something like 'account not available'. Removing the card and rebooting fixes that problem. 2. In Mail.app, if I get an email from someone whose Cert depends on a DoD Intermediate Cert that is not loaded in Keychain.app (e.g. CA-25), the message is marked as 'not trusted'. If I click on that box and tell Mail "always trust this cert", both Mail.app and Keychain.app hang. This generally messes up the machine sufficiently that a reboot is necessary. Has anyone else observed these? dave

3 2

Support for Safenet iKey 2032?
by Howard Fore 23 Sep '11

23 Sep '11

Hi, I've just upgraded to 10.7 and my Safenet 1.0.3 Borderless Security driver isn't working anymore. I'm told that this is due to Apple's removal of builtin support for smartcard services. Does the Safenet iKey 2032 USB token fall into that category? If so, does this project provide support for the token? Or does it provide the missing pieces from 10.7 so the Safenet driver can work again? -- Howard Fore, howard.fore(a)hofo.com "A novice asked the master, 'What is the true meaning of programming?' The master replied: 'Eat when you are hungry, sleep when you are fatigued, program when the moment is right.' " - Geoffrey James<http://www.softwarequotes.com/showquotes.aspx?id=687&name=James,Geoffrey>- From The Zen of Programming.

2 1