User profile for user: rejsmont
rejsmont Author
User level: Level 1
1 points

What do authorizationhost validate chain codes mean?

Hi,


I am trying to set up PKI based login to my system. While all the stuff works relatively fine, with some smartcards I am getting the following in the secure.log:


authorizationhost[379]: validate chain started

authorizationhost[379]: validate chain completed with: 1


and nothing happens to the login screen.


I have already figures out that when the root certificate is not trusted you get:


authorizationhost[379]: validate chain started

authorizationhost[379]: Certificate could not be verified: 5

authorizationhost[379]: validate chain completed with: 5


And when everything is OK, the resulting logs are:


authorizationhost[379]: validate chain started

authorizationhost[379]: validate chain completed with: 4


and the pin code dialog shows up.


So... what do these codes returned by authorizationhost mean? Especially, what does code 1 mean?


Cheers,


Radek

Mac OS X (10.7.3)

Posted on Feb 23, 2012 3:52 AM

Reply
1 reply
Sort By: 
User profile for user: Barry Mcinnes1
Barry Mcinnes1
User level: Level 1
0 points

May 23, 2012 7:29 AM in response to rejsmont

I also have a similar problem in 10.7.3 and 10.7.4, using opensc and CAC card.

The CAC card can get unlocked in Keychain Access, but when at the login screen I get


May 23 08:19:08 mac27 com.apple.SecurityServer[22]: token inserted into reader SCM SCR 3310 00 00

May 23 08:19:08 mac27 com.apple.SecurityServer[22]: reader SCM SCR 3310 00 00 inserted token "CAC-4070-5072-8400" (CAC-4070-5072-8400) subservice 4 using driver com.apple.tokend.cac

May 23 08:19:08 mac27 authorizationhost[1091]: validate chain started

May 23 08:19:11 mac27 authorizationhost[1091]: Certificate could not be verified: 5

May 23 08:19:11 mac27 authorizationhost[1091]: validate chain completed with: 5

May 23 08:19:11 mac27 authorizationhost[1091]: validate chain started

May 23 08:19:11 mac27 authorizationhost[1091]: Certificate could not be verified: 5

May 23 08:19:11 mac27 authorizationhost[1091]: validate chain completed with: 5

May 23 08:19:11 mac27 authorizationhost[1091]: validate chain started

May 23 08:19:11 mac27 authorizationhost[1091]: Certificate could not be verified: 5

May 23 08:19:11 mac27 authorizationhost[1091]: validate chain completed with: 5

May 23 08:19:12 mac27 SecurityAgent[1096]: spawn_via_launchd() failed, errno=5 label=[0x0-0x6f06f].com.apple.AppleSpell path=/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell flags=0

May 23 08:19:12 mac27 SecurityAgent[1096]: spawn_via_launchd() failed, errno=5 label=[0x0-0x70070].com.apple.AppleSpell path=/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell flags=0

Reply

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

What do authorizationhost validate chain codes mean?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.
Learn more Sign up