- SmartcardServices-Users - lists.macosforge.org

PKINIT against Active Directory KDC
by Eino Tuominen 11 Jan '18

11 Jan '18

Hi all, I've been trying to get PK-INIT working with macOS High Sierra (10.13.2), Active Directory and Yubikeys. Currently I'm stuck at how I can get kinit to find correct certificates from keychain. I've managed to get things working with certificate and private key in a PEM-file. (kinit --pk-enterprise --windows -C FILE:/tmp/test.pem) But, if I store the certificate and key in Keychain and try the same command with kinit --pk-enterprise --windows -C KEYCHAIN: I get an error: kinit: krb5_pk_enterprise_certs: Failed to find PKINIT certificate: Certificate not found The certificate looks like this: $ /System/Library/PrivateFrameworks/Heimdal.framework/Helpers/hxtool print FILE:/tmp/test.pem cert: 0 friendly name: CN=Example Account,OU=People,DC=utu,DC=fi private key: yes issuer: "CN=University of Turku Issuing CA Class 1,DC=utu,DC=fi" subject: "CN=Example Account,OU=People,DC=utu,DC=fi" serial: 5500008FD546F070AD0E2F882C000000008FD5 keyusage: keyEncipherment, digitalSignature persistent: 5BDC16DB57748F5B0164151D8BE4E367C459462A $ /System/Library/PrivateFrameworks/Heimdal.framework/Helpers/hxtool validate FILE:/tmp/ollopi.pem checking extention: extKeyUsage checking extention: keyUsage checking extention: subjectKeyIdentifier checking extention: authorityKeyIdentifier checking extention: cRLDistributionPoints checking extention: authorityInfoAccess Critical not set on MUST 1.3.6.1.5.5.7.48.21.3.6.1.5.5.7.48.2checking extention: subjectAltName The only difference when I use "hxtool print KEYCHAIN:" I see is "private key: no", although the private key is shown with the certificate in Keychain Access. I'd appreciate if someone could offer any clue on how to fix this or debug it further. Oh, and if someone could point me to more detailed documentation or how-to-articles on SmartCardServices, AttributeMapping and UserSelector I'd be very thankful. Man pages are rather vague on this. -- Eino Tuominen

1 0

MacOS High Sierra 10.13
by Christian Reischl 28 Sep '17

28 Sep '17

Hello, when will a 10.13 compatible version of the smart card services be available? Sincerely, Christian Reischl -- __________________________________________ Christian Reischl Fraunhofer Institut für Verfahrenstechnik und Verpackung Giggenhauser Str. 35 85354 Freising Tel.: +49 8161 491-704 mailto:christian.reischl@ivv.fraunhofer.de http://www.ivv.fraunhofer.de/

1 0

MacOS Sierra 10.12.5 error
by Matt Lichtenberg 19 Jul '17

19 Jul '17

Hello, I’m trying to use my CAC reader on my mac and am unable to open the .pkg file for the latest MacOS Sierra version. I get the following message: I searched through your message archives to see if others have found a resolution to this issue. The only person I saw who gave advice was Bill Maloy (contractor) on the June 2017 Archives message list: First, open up System Preferences, click "Security & Privacy" and then select the General tab. Note the "lock" in the lower left of the window. Unlock it using Administrator credentials. Leave the window visible as you double-click the previously downloaded Smartcard Services 2.1.2 [OSX 10.12].pkg file. You should get a message about the file not being opened because it's from an unidentified developer. Click Ok. Now, refer back to the Security & Privacy window, and you'll see a message about the package being blocked and why ... but there should now be an "Open Anyway" button. Click it. You'll then get additional warnings and multiple opportunities to change your mind. I did everything he said to do, but I don’t get the “unidentified developer” message. I still get the same message pop up as mentioned above. I’m trying to access the AF Portal from my MacBook Pro. Any help you can provide would be greatly appreciated. Thanks! Sincerely, Matthew Lichtenberg

2 1

MacOS Sierra
by Sherry Brauer 25 Jun '17

25 Jun '17

Good morning, Do you know how long until software will be available for Smartcard Services for MacOS Sierra 10.12.5? Most of the people I know have Sierra and none of us can log onto the Air Force portal. Thank you so much. V/R, Sherry

4 6

Update for Mac
by Jeffery Porter 08 Jun '17

08 Jun '17

Can you create the latest update for Mac users for access to the AF Portal? I have MacOS Sierra 10.12.5.

1 0

Apple Installation Issues.
by Christopher Leroux 12 May '17

12 May '17

Hello, I am a Mac user and I am having issues opening the correct file as the current OSx is Sierra. For more information, I have been able to use my CaC Card on my MacBookPro previously, but I am only now having issues. Please advise. Thank you. Christopher Leroux

3 3

Re: [SmartcardServices-Users] OS Sierra
by Jorgensen, Will A 03 Apr '17

03 Apr '17

SmartCardServices has largely been superseded in Sierra by the Crypto token kit API’s. Many smartcards and readers are natively supported in Sierra, but there are notable differences. For example, if you are looking for the smart card to show in the Keychain the way it used to it doesn’t. We are still using some applications that rely on that function and so we are using the free centrify tokend module. Depending on what you need, you should evaluate using the API’s as by in large they are a more reliable/stable experience assuming they do everything you need. __________________________________________________ Will Jorgensen IT Engineer Feedback helps us grow! -----Original Message----- From: <smartcardservices-users-bounces(a)lists.macosforge.org> on behalf of Paige Kinney <pkinney(a)patchplusconsulting.com> Date: Wednesday, March 29, 2017 at 11:22 AM To: "smartcardservices-users(a)lists.macosforge.org" <smartcardservices-users(a)lists.macosforge.org> Subject: [SmartcardServices-Users] OS Sierra I see this question has been asked but there are no archived answers. Where do I find smart card services for S Sierra? Thanks Paige _______________________________________________ SmartcardServices-Users mailing list SmartcardServices-Users(a)lists.macosforge.org https://lists.macosforge.org/mailman/listinfo/smartcardservices-users

4 3

OS Sierra
by Paige Kinney 03 Apr '17

03 Apr '17

I see this question has been asked but there are no archived answers. Where do I find smart card services for S Sierra? Thanks Paige

2 1

Smart Card Services for MAC OS Sierra
by Phani 04 Jan '17

04 Jan '17

Hi Friends, I am trying to install SmartCardServices2.1.2-OSX10.11 in macOS Sierra. But it is giving me message I should only run in macOS El Capitan v10.11. Would you assist me install. Thanks, Phani

1 0

Smart Card Services for MAC OS Sierra
by Phani 04 Jan '17

04 Jan '17

Hi Friends, I am trying to install SmartCardServices2.1.2-OSX10.11 in macOS Sierra. But it is giving me message I should only run in macOS El Capitan v10.11. Would you assist me install. Thanks, Phani

1 0