[SmartcardServices-Users] New CAC problems

[Brian Reese]

I can confirm what Paul is experiencing. I just installed it on a 10.5.8
system and there was no CACNG.tokend in the tokend directory. I dug into the
installer logs and found it is installing the tokend at the root directory
of the system. I would assume the bundle can just be copied into the proper
directory?

Regardless, it seems like the installer needs to be fixed.

Thanks,
Brian Reese
NMRC Help Desk


On 1/25/10 2:19 PM, "Evans, Paul CIV NAVAIR Bldg 1463"
<paul.evans1 at navy.mil> wrote:

> Shawn,
>  
> That is the installer I tried.  Still no luck.
>  
> pe
> 
> ________________________________
> 
> From: Shawn A. Geddis [mailto:geddis at mac.com]
> Sent: Mon 1/25/2010 2:14 PM
> To: Evans, Paul CIV NAVAIR Bldg 1463
> Cc: smartcardservices-users at lists.macosforge.org
> Subject: Re: [SmartcardServices-Users] New CAC problems
> 
> 
> Paul,
> 
> This indicates that you do not have the CAC-NG Tokend installed on your
> machine -- Hence the lack of support for your New Card.
> 
> And the Installer you are speaking of is the one I provided at : ?
> 
> http://static.macosforge.org/smartcardservices/downloads/installers/CAC-NG-v0.
> 9-beta.zip
> 
> 
> -Shawn
> 
> __________________________________________________
> Shawn Geddis       geddis at mac.com
> Security Consulting Engineer
> 
> MacOSForge Project Lead:                           Smart Card Services
> Web: http://smartcardservices.macosforge.org/
> Lists: http://lists.macosforge.org/mailman/listinfo
> __________________________________________________
> 
> 
> On Jan 25, 2010, at 2:06 PM, Evans, Paul CIV NAVAIR Bldg 1463 wrote:
> 
> Shawn,
> 
> I don't have AFC running.  Checked the tokend directory and all I have are the
> following.
> 
> BELPIC.tokend
> CAC.tokend
> PIV.tokend
> 
> I tried reinstalling both under my account and as root and both said the
> install was successful.
> 
> Any thoughts?
> 
> Thanks.
> 
> pe
> 
> 
> 
> ________________________________
> 
> From: Shawn A. Geddis [mailto:geddis at mac.com]
> Sent: Mon 1/25/2010 12:25 PM
> To: Evans, Paul CIV NAVAIR Bldg 1463
> Cc: smartcardservices-users at lists.macosforge.org
> Subject: Re: [SmartcardServices-Users] New CAC problems
> 
> 
> On Jan 25, 2010, at 11:33 AM, Evans, Paul CIV NAVAIR Bldg 1463 wrote:
> 
> All,
> 
> I just received a new CAC today and I'm having issues with it on my MacBook
> Pro running 10.5.8.  The new card is apparently the dual applet type (CAC and
> PIV).  I found a post  on the fed-talk list from Shawn Geddis back in November
> pointing to the beta tokend and installed it but it still doesn't work.  The
> card seems to be recognized by the keychain app but when I click on it it
> doesn't show any certs or other information.  When I try to unlock it, it
> won't accept the PIN.  Are there any work-arounds?
> 
> Thanks,
> 
> 
> 
> Paul,
> 
> The CAC-NG Tokend was indeed posted here for Mac OS X 10.5.x - Leopard:
> 
> Main Project Page Posting: http://smartcardservices.macosforge.org/
> Installers Page: http://smartcardservices.macosforge.org/trac/wiki/installers
> 
> 
> This installer adds another Tokend "CAC-NG" to your Tokend directory.
> 
> Since you indicate that:
> 
> The card seems to be recognized by the keychain app but when I click on it it
> doesn't show any certs or other information.
> 
> 
> This indicates that the card is being picked up by the original CAC Tokend and
> not the CAC-NG.  Is it possible that you have Thursby's ADmitMac for CAC (AFC)
> installed ?  If so, be aware that AFC has their version of the CAC tokend
> embedded in their software - not exactly ideal, but they took this approach to
> incorporate PKINIT in their earlier releases.  If you use AFC then Thursby
> will need to update their software for you.
> 
> If you have never had AFC installed on this particular machine then we would
> need to look further at the current issues you might have preventing use of
> the CAC-NG.
> 
> 
> Make sure that the tokend is indeed installed properly....
> 
> 
> $ ls -al /System/Library/Security/tokend/
> 
> 
> reply to list with what you have.
> 
> -Shawn
> 
> 
> 
> _______________________________________________
> SmartcardServices-Users mailing list
> SmartcardServices-Users at lists.macosforge.org
> http://lists.macosforge.org/mailman/listinfo.cgi/smartcardservices-users