For our users Keychain is a nightmare - especially because they do not remember the first password - as the network enforces them to change it every 90 days. With this the keychain pop keeps coming up constantly and is affecting the users working. So I would like to know how to stop keychain or to disable it?
Mac Pro (Early 2009), Mac OS X (10.6.8)
Hello you can reset the users keychain by deleting the keychain preferences in Users/Library/Keychains then deleted the contents of that folder log out and and log back in and the keychain password will reset to the users current password hope this helps
Ok, If I don't want to do that - then how do I stop the KeyChain popping about 20 times when the user receives a HTML email and it keeps asking for the Keychain password and of which they do not know it?
If there is anyway to help the users - all suggestions welcome.
Thanks
The Mac are connected to a Microsoft Active Directory environment with Exchange 2003.
The Mac Users login to their machines with AD Username and Passwords, and the Entourage client pops up requesting Usename, Domain & Password when they connect. So that's how they work.
Now when they go to open a HTML email or go to the internet - the Keychain keeps popping up - the user clicks cancel about 20 times and eventually they are able to get on the internet or look at the HTML email.
So you can imagine their frustration.
So how can I stop the Key chain from popping up?
I hate the keychain. I use google chrome to store my passwords and I don't care who can acess it or how much better other people think the keychain is. I want to disable it. It defeats the purpose of storing passwords if you have to enter a stupid password everytime you use a stored one. So can someone tell me how to disable the keychain please?
I'm having a similar problem. I tried this: http://www.ehow.com/how_8678285_disable-keychain-mac.html
And that got rid of the majority of the pop-ups, but it's still doing it. I have to click "cancel" on the pop-ups 3 times each time it pops up, which is frequently. In order to reset my password for this site so that I could post to this discussion I has to enter 2 characters into the box, click "cancel" on the pop-up 3X, enter 2 more characters, click cancel 3 more times... etc. for both the new password and the confirmation. It also wouldn't let me use the password I wanted to, which is why I couldn't remember what it was in the first place, it keeps making me change it to something new. Aside from keeping passwords on a post it note on the computer, which would defeat the purpose, I don't know how to get around this.
...and I used to prefer macs because they were more user friendly. I've been having trouble with tabs in safari not closing when I click on the "X", and other little stuff for a long time too. In the last year or so I'm starting to think that as long as I have to put up with this kind of buggy stuff I might as well do it on a PC for half the price.
What I did is: Went into Keychain Access and I went to the login tab, I right clicked it and it said delete. I thought it was pretty self explanitory that it would stop it from popping up while logging into something, and it worked. So it hasn't popped up with a keychain since I did this.
HorsewareIT wrote:
So how can I stop the Key chain from popping up?
That's not the issue. It seems to me something in your system is not properly configured. Start here
<http://support.apple.com/kb/HT3915>
<http://support.apple.com/kb/TS1532>
HTH
rcgrohn wrote:
Why does Apple not offer a tool to automatically sync the login password with the keychain password when Active Directoy needs to be used? Maybe add a button "Sync with AD" in the user account area?
If you could just issue a command to change the keychain password without actually knowing the old one it wouldn't be a very secure keychain now would it? You could reset the bosses Keychain & get a raise 🙂.
Has anyone tried changing an empty login.keychain to be owned by root with no access for the user? It should prevent a user writing to that keychain which should prevent any user saving data to it (which causes the unlock prompts).
It's probably a terrible idea, since the OS will not remember any passwords for that user, so try it on a test account.
Another option is you make a script that runs on user login & resets the keychain password (assuming you can query the new & old password from Active Directory - is this even possible).
The 'security' command will allow you to script resetting the keychain password…
It will also allow you to set passwords for particular services, apps, URLS etc (like when the AD password for POP/IMAP changes).
It's not a simple answer - but this is Apple, you have to think different if you want the OS to behave how you want.
Go ahead trash it and see what happens. Be my guest.
/usr/sbin/systemkeychain
/System/Library/SyncServices/AutoRegistration/Schemas/com.apple.Keychain.syncsch ema
/System/Library/SyncServices/AutoRegistration/Clients/com.apple.Keychain
/Users/yourusername/Library/Keychains/login.keychain
/Library/Keychains/System.keychain
/System/Library/Keychains/SystemCACertificates.keychain
/System/Library/Keychains/SystemRootCertificates.keychain
/Users/yourusername/Library/Preferences/com.apple.keychainaccess.plist
/System/Library/LaunchDaemons/com.apple.systemkeychain.plist
/System/Library/Frameworks/SecurityInterface.framework/Versions/A/Resources/zh_T W.lproj/KeychainSettingsPanel.nib (and many more where these are.)
/Library/Keychains
/System/Library/Keychains
/Users/yourusername/Library/Keychains
Hi,
don't know if you have solved this problem alreday. I also think this keychain is a very bad thing for a professional environment as it' s just not thought to the end. The thing is you have to teach your users changing their passwords only using a Mac and only then in the system preferences / users part. This is for my knowledge the only place Mac OS X tries to keep those passwords in sync. Also whey your users use more than one Mac or logging in to other machines I made the best experience in setting up mobile accounts and sync the whole folder ~/Library/Keychains between the machines. This makes sure that when you cange the account password on one Mac the keychain will replicate to all other machines you logon and so the password of the account and the keychain fits again. Works ok for me. Anyway my keychain has Alzheimer and I have to type randomly passwords once in a while. Especially Messages and FaceTime passwords are a horror.
Hope it helps.
Cheers
R
Agreed that it is annoying to remember two passwords to get to one place. I deal with people in a retirement home whose memory is poor, and their getting prompted all the time is infuriating and gets them tied up in knots.
I would go to the primary Safari menu in the upper left corner, click preferences, passwords, and delete the ones you don't want it to store. The next time you enter your own passwords and keychain access pops up, select never ask to store again. You can also delete the passwords by going to Applications, then Keychain access and delete the web passwords under in the password category.
The problem the OP has I have too. But I would describe it differently.
I have passwords stored for the active directory domain. Those passwords are stored in "internet passwords" in the System Preferences pane, associated with Exchange. The result is that when the password policy requires a user to CHANGE his password, then the user does that (for instance on an office computer, running windows), the result is that the first time the user boot's his mac at home, and starts mail a very bad thing happens.
Mail tries multiple times to log in using the old password and then gives up (the multiple bad attempts actually disable the user account in Active Directory in my case).
Then the user can't log in at home or at work, and has to call support.
What is needed is a way to NOT remember the Exchange password and prompt for it each time it is needed by the mac app. These apps would include Mail, Calendar, Notes, Reminders and Contacts.
Dear Hackintosh,
I'd bet you are a level one by your response to the very reasonable question posed by several Mac users (such as HorseWareIT): "How do I disable Keychain?"
Any level-minded Mac user could never have replied so daftly. Keep quiet unless you have experienced what they are telling you. They go on this forum for good reason, and one is certainly NOT to get glib and flat-line answers. The keychain issue is madness for a multitude of reasons. HorseWareIT explained only one possible, maddening scenario.
WOW Thank you. This absolutely fixed the constant annoying Keychain prompts. But I have a feeling that this has only 4 thanks because people don't know that you can't just open finder to find Keychains.
Use spotlight to find Terminal.
In Terminal type this command cd /Users/admin/Library/Keychains/ Note that Capital letters count so /users is not the same as /Users. Replace admin with your username.
From here delete the files with this command. *WARNIG MAKE SURE YOU ARE REALLY IN THE CORRECT DIRECTORY*
Type pwd It should respond with /Users/admin/Library/Keychains/
then delete everything with this command. rm -f * <<< That's r m -f * <<<Added spaces so r and m are legible.
log out and log back in and enjoy No More keychain spams.
How do I disable Keychain
