Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Can't Unlock Preference Panes

I noticed that my monitor didn't go to sleep last night, I opened System Preferences, pulled up Energy Saver but I am unable to unlock that or any other preference pane... I click on the lock, it flashes, but no dialog window ever appears asking for my admin password.

Posted on Aug 8, 2011 2:50 PM

Reply
112 replies

Mar 10, 2013 2:42 PM in response to Sean L.

Ok, spent some more time on this. So far I haven't found any issues with this, so please let me know if any of you find something.


got to /etc and make a backup of "authorization"

Edit authorization (you'll need to do this as root)

find the <key>system.login.console</key>

under the mechanisms array add

<string>builtin:smartcard-sniffer,privileged</string>

find the <key>authenticate</key>

under the mechanisms array add

<string>builtin:smartcard-sniffer,privileged</string>

save the file


next add your reader and card.

open terminal and type:

sc_auth hash


You'll see a line that looks like this:

01C2F20D8964BE7701B57B63B0A1795B8F2604C1 Identity Private Key


use the key from the output and type the following using your current username in the "myuser" spot

sudo sc_auth accept -u myuser -h 01C2F20D8964BE7701B57B63B0A1795B8F2604C1


REBOOT


I'm hoping I got the steps correct, as I tried multiple edits on the authorization file, and a few reboots before I go to what appears to be a working setup. These are the steps I used after restoring the authorization file from backup and trying again. I did a reboot before testing anything as one of my initial tests appeared to work correctly until I rebooted, at which time nothing worked anymore.


I have done multiple open/close, lock/unluck of System Preferences both with CAC in and out over the last few days, no reboot, multiple sleep/wake cycles, and it seems to always function. The only thing I have noticed is that authentications when CAC is inserted (Sys Pref, return from sleep, possibly others) is a bit slower before the password dialog box pops up than when CAC is removed.... small price to pay for not needing a reboot just to change Prefs after using my CAC.


Let me know if you experience something out of the ordinary using this setup.



-- OSX 10.7.5, MacOSforge Smarcard Services 2.0.b2 --



UPDATE:

After 3 days of testing, and then posting, I just pulled my CAC reader and my Sys Prefs are locked up. It could have something to do with the fact that I pulled the reader with the card still in it, instead of pulling my card first like I always do. Will do further testing on this to see if it's the case.

Apr 17, 2013 1:41 PM in response to Sean L.

Hi all,


two things to do or check:

- Open your Keychain Access application and do a "Keychain First Aid". This might solve some issues.

- Go into your terminal and type "sudo pkill -HUP securityd" (sort of the same as okinrav posted)


This problem might be caused by a Smart Card Reader or a keychain related problem.


Some people have the standard answer "Reinstall your system", but that's only helpfull if your files are corrupted due to disk failure or a rougue application.


Have fun!


Stefan Bracke

Aug 21, 2013 6:38 PM in response to Sean L.

I had this problem.


MBP Retina, 10.8.2


Lock in network settings was unexpectedly closed and just flashed when clicked. Couldn't change anything.


I disconnected my HDMI-connected monitor and it resolved instantly.


I reconnected HDMI in about 10 seconds and the lock was not only still 'clickable' but actually open instead of locked. Go figure.


This is the first HDMI-related (could be) problem I've had with a Retina MBP. My old non-Retina had conflicts and flakiness with HDMI and many other system functions.



-jon

Oct 4, 2013 2:37 PM in response to nmt1900

I read and try a lot of suggestions. Nothing to do. I have added a new accompt. Nothing to do. And by hazard when I clicked on padlock I put the user name of the orginal accompt and its PW.... and it was working !?! I could boot on the original accompt and open the padlock with the second user name and it PW. Of course I am to tired to figure why it' working.


MBP early 2008, 15 '' 10.7.5 (6 months ago), 500WD Black

Dec 15, 2013 12:19 AM in response to Sean L.

I logged off (apple icon - log off). Logged on then restarted the computer. I could then unlock the padlock. In my case it may have had something to do with the permissions of each user that control these security changes. I still do not know why logging of and restarting should fix it though. I was logged on when I did the changes.

Can't Unlock Preference Panes

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.