You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

User profile for user: rejsmont
rejsmont Author
User level: Level 1
1 points

What do authorizationhost validate chain codes mean?

Hi,


I am trying to set up PKI based login to my system. While all the stuff works relatively fine, with some smartcards I am getting the following in the secure.log:


authorizationhost[379]: validate chain started

authorizationhost[379]: validate chain completed with: 1


and nothing happens to the login screen.


I have already figures out that when the root certificate is not trusted you get:


authorizationhost[379]: validate chain started

authorizationhost[379]: Certificate could not be verified: 5

authorizationhost[379]: validate chain completed with: 5


And when everything is OK, the resulting logs are:


authorizationhost[379]: validate chain started

authorizationhost[379]: validate chain completed with: 4


and the pin code dialog shows up.


So... what do these codes returned by authorizationhost mean? Especially, what does code 1 mean?


Cheers,


Radek

Mac OS X (10.7.3)

Posted on Feb 23, 2012 3:52 AM

Reply
1 reply
User profile for user: Barry Mcinnes1
Barry Mcinnes1
User level: Level 1
0 points

May 23, 2012 7:29 AM in response to rejsmont

I also have a similar problem in 10.7.3 and 10.7.4, using opensc and CAC card.

The CAC card can get unlocked in Keychain Access, but when at the login screen I get


May 23 08:19:08 mac27 com.apple.SecurityServer[22]: token inserted into reader SCM SCR 3310 00 00

May 23 08:19:08 mac27 com.apple.SecurityServer[22]: reader SCM SCR 3310 00 00 inserted token "CAC-4070-5072-8400" (CAC-4070-5072-8400) subservice 4 using driver com.apple.tokend.cac

May 23 08:19:08 mac27 authorizationhost[1091]: validate chain started

May 23 08:19:11 mac27 authorizationhost[1091]: Certificate could not be verified: 5

May 23 08:19:11 mac27 authorizationhost[1091]: validate chain completed with: 5

May 23 08:19:11 mac27 authorizationhost[1091]: validate chain started

May 23 08:19:11 mac27 authorizationhost[1091]: Certificate could not be verified: 5

May 23 08:19:11 mac27 authorizationhost[1091]: validate chain completed with: 5

May 23 08:19:11 mac27 authorizationhost[1091]: validate chain started

May 23 08:19:11 mac27 authorizationhost[1091]: Certificate could not be verified: 5

May 23 08:19:11 mac27 authorizationhost[1091]: validate chain completed with: 5

May 23 08:19:12 mac27 SecurityAgent[1096]: spawn_via_launchd() failed, errno=5 label=[0x0-0x6f06f].com.apple.AppleSpell path=/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell flags=0

May 23 08:19:12 mac27 SecurityAgent[1096]: spawn_via_launchd() failed, errno=5 label=[0x0-0x70070].com.apple.AppleSpell path=/System/Library/Services/AppleSpell.service/Contents/MacOS/AppleSpell flags=0

Reply

What do authorizationhost validate chain codes mean?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.
Learn more Sign up