OS X wants to make changes. I can't enter administrator's name and password, el capitan.

Question

Level 1

9 points

OS X wants to make changes. I can't enter administrator's name and password, el capitan.

I am trying to connect to my work's VPN with Cisco anyconnect but the following window keeps popping up:

When I enter the username and password and click 'Allow', the window won't go away and it won't accept my details. Has anyone come across this and found a fix?

I have upgraded to 10.11.1, but this error came up a couple of days ago while using 10.11.0 and has persisted.

MacBook Air (13-inch, Early 2015), OS X El Capitan (10.11.1)

Posted on Oct 23, 2015 1:20 AM

Reply

Answer 1

RichDAdams Author

Level 1

9 points

Oct 26, 2015 9:38 AM in response to Linc Davis

Hello,

This was an issue with my keychain. Someone from Apple support resolved the issue.

By deleting the keychain folder in library and starting again, the issue disappeared.

Thanks again for your help.

Reply

Answer 2

RichDAdams Author

Level 1

9 points

Oct 24, 2015 12:53 AM in response to Nitret

Unfortunately I am 100% sure that I'm entering the correct details. Thanks, I won't turn on the iCloud feature then. Having had a look I don't think I'm the only person having problems with keychain on el capitan. This seems to be related: keychain not working after El Capitan

Reply

Answer 3

RichDAdams Author

Level 1

9 points

Oct 24, 2015 12:33 AM in response to Nitret

This is the only instance of 'OS X wants to make changes' that is popping up, so I don't know if it would happen any other time. No I am not using this feature, do you think that turning this feature on may help resolve it?

Reply

Answer 4

Linc Davis

Level 10

209,739 points

Oct 24, 2015 9:51 AM in response to RichDAdams

Launch the Console application in any of the following ways:

☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)

☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.

☞ Open LaunchPad and start typing the name.

The title of the Console window should be All Messages. If it isn't, select

SYSTEM LOG QUERIES ▹ All Messages

from the log list on the left. If you don't see that list, select

View ▹ Show Log List

from the menu bar at the top of the screen.

Click the Clear Display icon in the toolbar. Then take an action that isn't working the way you expect. Select any lines that appear in the Console window. Copy them to the Clipboard by pressing the key combination command-C. Paste into a reply to this message by pressing command-V.

The log contains a vast amount of information, almost all of which is irrelevant to solving any particular problem. When posting a log extract, be selective. A few dozen lines are almost always more than enough.

Please don't indiscriminately dump thousands of lines from the log into this discussion.

Please don't post screenshots of log messages—post the text.

Some private information, such as your name or email address, may appear in the log. Anonymize before posting.

When you post the log extract, you might see an error message on the web page: "You have included content in your post that is not permitted," or "The message contains invalid characters." That's a bug in the forum software. Please post the text on Pastebin, then post a link here to the page you created.

Reply

Answer 5

RichDAdams Author

Level 1

9 points

Oct 25, 2015 1:26 AM in response to Linc Davis

I've tried to remove as many lines as possible between the initial error with the VPN and where it says to ignore user entry.

25/10/2015 08:10:47.526 com.apple.SecurityServer[86]: Problem opening rules file "/etc/authorization": No such file or directory

25/10/2015 08:10:47.526 com.apple.SecurityServer[86]: Authorization via securityd no longer supported

25/10/2015 08:10:48.818 acvpnui[1075]: Function: SignHash File: ../../vpn/CommonCrypt/Certificates/MacCertificate.cpp Line: 1463 Invoked Function: CSSM_SignData Return Code: -2147415839 (0x800108E1) Description: unknown

25/10/2015 08:10:49.218 acvpnui[1075]: Function: SendRequest File: ../../vpn/Api/CTransportCurlStatic.cpp Line: 1465 Invoked Function: curl_easy_perform Return Code: -30015446 (0xFE36002A) Description: CTRANSPORT_ERROR_SSL_HANDSHAKE 35 : Error

25/10/2015 08:10:49.218 acvpnui[1075]: Function: sendRequest File: ../../vpn/Api/ConnectIfc.cpp Line: 3209 Invoked Function: CTransport::SendRequest Return Code: -30015446 (0xFE36002A) Description: CTRANSPORT_ERROR_SSL_HANDSHAKE

25/10/2015 08:10:49.218 acvpnui[1075]: Function: connect File: ../../vpn/Api/ConnectIfc.cpp Line: 481 Invoked Function: ConnectIfc::sendRequest Return Code: -30015446 (0xFE36002A) Description: CTRANSPORT_ERROR_SSL_HANDSHAKE

25/10/2015 08:10:49.218 acvpnui[1075]: Function: TranslateStatusCode File: ../../vpn/Api/ConnectIfc.cpp Line: 3026 Invoked Function: TranslateStatusCode Return Code: -30015446 (0xFE36002A) Description: CTRANSPORT_ERROR_SSL_HANDSHAKE Connection attempt has failed due to server communication errors. Please retry the connection.

25/10/2015 08:10:49.218 acvpnui[1075]: Function: doConnectIfcConnect File: ../../vpn/Api/ConnectMgr.cpp Line: 1972 Invoked Function: ConnectIfc::connect Return Code: -30015446 (0xFE36002A) Description: CTRANSPORT_ERROR_SSL_HANDSHAKE

25/10/2015 08:10:49.219 acvpnui[1075]: Function: processIfcData File: ../../vpn/Api/ConnectMgr.cpp Line: 2773 Invoked Function: ConnectMgr::processIfcData Return Code: -30015446 (0xFE36002A) Description: CTRANSPORT_ERROR_SSL_HANDSHAKE Connection attempt has failed due to server communication errors. Please retry the connection.

25/10/2015 08:10:49.219 acvpnui[1075]: Function: nextClientCert File: ../../vpn/Api/ConnectMgr.cpp Line: 5105 Subject Name: O=.com, CN=, UID=, mail= Issuer Name : C=US, O=, CN= VPN Intermediate CA Store : Mac Keychain User

25/10/2015 08:10:49.586 acvpnui[1075]: Function: getUserName File: ../../vpn/Api/CTransportCurlStatic.cpp Line: 1982 PasswordEntry username is

25/10/2015 08:10:49.601 acvpnui[1075]: Function: PeerCertVerifyCB File: ../../vpn/Api/CTransportCurlStatic.cpp Line: 877 Return success from VerifyServerCertificate

25/10/2015 08:10:49.601 acvpnui[1075]: Function: getUserName File: ../../vpn/Api/CTransportCurlStatic.cpp Line: 1982 PasswordEntry username is

25/10/2015 08:10:52.469 SecurityAgent[1737]: Ignoring user action since the dialog has received events from an untrusted source

Reply

Answer 6

Linc Davis

Level 10

209,739 points

Oct 23, 2015 5:34 PM in response to RichDAdams

Can you open the System keychain in Keychain Access?

Reply

Answer 7

RichDAdams Author

Level 1

9 points

Oct 23, 2015 11:29 PM in response to Linc Davis

Hello, thanks for responding. Yes I can.

Reply

Answer 8

Nitret

Level 1

5 points

Oct 23, 2015 11:51 PM in response to RichDAdams

Does this happen in every time OS X wants to make changes requiring an admin password? Do you use "Use iCloud password to log into your computer" feature?

Reply

Answer 9

Nitret

Level 1

5 points

Oct 24, 2015 12:46 AM in response to RichDAdams

If you're not using the iCloud login feature, then this might be a separate issue altogether. I wouldn't recommend turning that on. Are you sure you typed in the correct username?

Reply

Answer 10

Linc Davis

Level 10

209,739 points

Oct 25, 2015 7:38 AM in response to RichDAdams

You'll either have to update "AnyConnect," refer to its developer for support, or get rid of it. I can't tell you how to make it work. Use the built-in Cisco client, if possible.

Reply

Answer 11

RichDAdams Author

Level 1

9 points

Oct 25, 2015 11:40 AM in response to Linc Davis

OK, thanks very much for trying to help. If I manage to come up with a fix I'll reply on this thread.

Reply