Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Confidential "internetaccounts access group" request

Not for the first time, Mail is flashing a request, "Mail wants to use your confidential information stored in "InternetAccounts Access Group" in your keychain. Do you wan to allow access to this item?"


There are three choices - Always Allow, Deny and Allow.


Before I grant the Always option, I'd like to know more about what this is and why I have to choose to do it? Seems Mail won't work unless I do, because if I simply pick Allow, it continues to flash the request.


I checked the Support Knowledge Base and nothing turned up.


Any ideas?

iMac, Mac OS X (10.5.1), Dual Core Intel

Posted on May 17, 2011 10:54 AM

Reply
33 replies

May 29, 2011 8:46 AM in response to andyBall_uk

Andy,


Yes, exactly. I testing Lion on my MacBook Air, which I had set to sync Mail Accounts and Mail Rules to the iMac where the message is appearing.


I suspected it might have to do with Lion, so stopped the syncing. However, I can't find "InternetAccounts Access Group" in the Keychain of the MacBook Air, either.


But, your surmise suggests you have an idea about this.


Thanks,


George

May 30, 2011 1:07 PM in response to LGGeiger

🙂 my only idea was the name being familiar, but looking here I find no sign of a similar keychain item , although this seems likely to be related to a preference pane of the same name.


To avoid breaching the terms here, I suggest posting in the relevant forum for the Lion preview - but presumably some aspect of the syncing went awry & persists after stopping it. Rather than wholesale dumping of files & folders, you might follow Apple's unusually forthright advice " As if it were a swarm of bees, you should stay away from the SyncServices folder " & instead use the steps described on these pages.


http://support.apple.com/kb/ts1627


http://support.apple.com/kb/TS2481


http://support.apple.com/kb/HT3783


Seems odd that there's no error in Console (there's not?) when the item can't be found.

Jul 22, 2011 5:27 PM in response to LGGeiger

I have encountered the same problem, precisely. No such item exists in my keychain. And the problem started after I have installoed Lion on another computer, which is synched with this one. I called Apple Support, but all they could say was "mail wants access to your keychain, you should allow it." No understanding of the issue: why this particualr name, why it is absent in the keychain. I finally clicked on "Always Allow" If this is some kind of a new malware stealing info, I am in trouble. I hope this is merely a bug, and the Apple support people are "merely" incomptent (as always).

Jul 26, 2011 3:06 AM in response to LGGeiger

I've also just installed Lion and I'm now getting the following dialog and don't know what to do!


"Fantastical wants to use your confidential information stored in "InternetAccounts Access Group" in your keychain.


Do you want to allow acces to this item?"


I've only setup my Gmail account in Mail and Google calendar account in iCal. I'm guessing that Fantastical wants to access my Google calendar information, but I'd like to be sure.


Don't Apple staff ever read these discussions? Those who programmed OS X Lion are bound to know what this is all about!


UPDATE: I denied access and a new dialog popped up requesting that I enter my Google calendar password. It seems that Apple have set up an additional security barrier when applications want to access password protected online accounts. Why one would need to grant access to all internet accounts within a group puzzles me though!


I'd very much like to know how to access the contents of my "InternetAccounts Access Group" which I can't find in my Keychain Access!

Jul 26, 2011 9:46 AM in response to noondaywitch

I'll tell you what is wrong:


1) it's the first time I ever here of something called SpiceRack! Even Google seems at a loss for search results!


2) the dialog messages are cryptic and not user friendly (e.g. what is a "scripting addition command"?)


3) I have no way of checking what exactly it is that I'm providing access to (i.e. what is in the InternetAccounts Access Group)


4) it's annoying because the dialogs pop up quite frequently (not sure if this only happens the first time)


5) if this new feature wasn't in Snow Leopard and all previous versions OS X, why is it becoming necessary to have it in Lion?


6) why aren't users given the choice to set this security feature on/off?


I hope I've answered your enlightening question!

Jul 26, 2011 9:57 AM in response to numbles45

I don't know what Spice Rack is either, and if you didn't download it you absolutely do not want to allow it to run scripts on other applications.


Scripting additions are exactly what they say; short scripts (in any scripting language recognisable by the OS from AppleScript to Perl, Ruby or Python) designed to alter the behaviour of the applications.


And if you're now on Lion, this is the wrong forum!

Jul 27, 2011 2:56 PM in response to noondaywitch

I've found where SpiceRack is coming from. SpiceRack is an app used by plugins that are created by TastyApps. Some of the plugins that use SpiceRack are Web Snapper, Music Box and Video Box. I had Web Snapper installed on my system, so that explains how SpiceRack ended up on my computer!


Apparently TastyApps will not be updating the Web Snapper plugin for OS X Lion and Safari 5.1, because they state: "Apple doesn't like these types of plugins, and is making it painfully clear with every upgrade, so we are now capitulating." The Wen Snapper plugin should however be replaced by a Safari extension.


You'll find more info here:

http://oven.tastyapps.com/forums/topic/web-snapper-on-lion-mac-os-x-107


To remove SpiceRack, head over to your system preferences and under "Other" click on SpiceRack. Then click the button "uninstall".


To remove Web Snapper, I recommend using CleanMyMac or the likes, because there are lots of files linked to this app that are spread across different folders. CleanMyMac finds them all (11 in total, including SpiceRack leftovers!).


I was wrong to blame Apple for SpiceRack, but I do hope we'll have some explanations regarding the InternetAccounts Access Group and how to explore its contents!

Aug 10, 2011 5:39 PM in response to LGGeiger

Hello LGGeiger,


I just had the same thing show up: "InternetAccounts Access Group" would like to access your Keychain, sort of thing. What was interesting was this happened just now during a "sync" of my iPhone. After searching the forums and reading through all the posts, I decided to "Always Allow" access, and at the moment I did that, the sync on the phone finished up (within about 2 or 3 seconds).


This led me to two things:

  1. This might have something to do with the phone, and
  2. What changes have I made there on the phone with internet accounts?


Your tip here on using a pre-release of Lion did it for me. I had just signed up for an account with testflightapp.com in order to receive beta installs for iOS apps. I "registered" my device with TestFlight's "App" via Safari on the iOS (saving the testflightapp.com link to the home screen) with login credentials and I believe this is what the AppleMobileSync was trying to request permission for in my keychain.


Thus, the "InternetAccounts Access Group" may very well have something to do with Accounts set up for "pre-release" and/or beta install testing. In your case, potentially of course, this may have showed up with a pre-release of Lion you'd been using, while in my case, the beta installs of iOS apps which I had signed up for through TestFlight.


I could be totally wrong, but at this point, that "group" is what I concluded I was "Always Allow"-ing when I clicked the button.

Aug 11, 2011 9:32 AM in response to calebweeks

Sounds like you're onto something.


When I upgraded my desktop with the first commercial release of Lion, it also asked for permission to access the "Internet Access Group" in my keyring. I did this once, and no further bother on either my desktop or laptop I used for the Appleseed tests.


As I have detected no malware or untoward use of my email, I'm assuming all is well.


Thanks for the thoughtful reply. I'm surprised Apple itself hasn't been out there with some info.


George

Nov 6, 2011 2:38 PM in response to LGGeiger

Hi,


I think that this is Smith Micro's Spring Clean application wanting "confidential information" from your keychain. It says below this message on my computer something about "schedulemailer" which I understand relates to Smith Micro from other research I have done. That research says that there is no earthly reason why SM need it. Can't guarantee that this is right.


Cheers,

Michael

Nov 8, 2011 5:50 AM in response to Blinky Bill

Michael,


A great piece of detective work. I'd never have suspected that a web-based business sending me email ads could get inside the Mac and generate official looking keychain requests. They've stopped now that I've upgraded to Lion (although perhaps that is coincidental). I've also just recently unsubscribed to Smith Micro's emails.


But, if you are correct, I'd have to say this is a major breach in Apple's secruity sceme - perhaps harmless in this case, but certainly a vulnerability that could be exploited by the so inclined.


Thanks,


George

Confidential "internetaccounts access group" request

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.