macOS Sierra always prompts for credentials for network drives

Reposting because my original post was incorrectly marked as 'Solved'


At home we have several Macs that mount, on login, some SMB network drives from various servers (OS X Server and Synology NAS). The credentials (username and password) for the network drives are stored in the user's keychain by way of the 'remember this password in my keychain' option the very first time the drives was ever mounted. As a result a command like 'mount' command successfully mounts the drives without the user needing to interact with an authentication dialogue. This has been working just fine for the longest time an all the way up through OS X 10.11.6.


In Sierra, any attempt to mount a network drive always pops up the authentication dialogue. The password may be prefilled (presumably from the keychain) but the user still has to respond to the dialogue by clicking OK. This is a huge problem for me as it breaks loads of automation scripts that I have that rely on using 'mount' (the problem is not specific to mount however; the same issue occurs if you use something like Finder's 'Connect to Server' command).


I've tried deleting all the 'network password' keychain entries so that they get re-creqted (they do) but the problem behaviour still occurs.

MacBook Pro with Retina display, OS X El Capitan (10.11.5)

Posted on Oct 12, 2016 7:03 AM

Reply
54 replies

Oct 14, 2016 7:07 AM in response to 18DPA

Somewhere in the original post for this topic, someone mentioned an app (available in the Mac App Store) called Automounter. I just bought it ($9.99 plus tax) and can report that it does work as claimed, and restores network-volume automount capability to Mac Sierra. SMB, NFS and AFP shares are supported, as are NAS devices. Once configured, it runs at login to mount the volumes to the Mac desktop, no Connect-button clicking needed. Then during normal operation it sits unobtrusively in the menu bar, ready for further configuration.


I'm not at all complaining or begruding the app developer the money charged for his software, but it is somewhat ironic that, while the Mac Sierra OS itself is free, it costs users $10 to restore a functionality lost in the upgrade from earlier systems. Seems to me the more sensible approach would have been a Security System Preference control allowing users the choice of always prompting for credentials or not. Maybe someday there will be...

Oct 14, 2016 8:07 PM in response to zero7404

here is a thread where they discuss a work-around by using apple script and adding it to login items:


https://forums.developer.apple.com/thread/51045


if i were on Sierra i would try it out. but i'm not upgrading just to try it.


that solution is not straightforward for many mac users, and would be something which apple would need to make the computer do for the user when a user wants to map/connect to a nas or share.

Oct 31, 2016 3:05 PM in response to ChrisJenkins

I don't think Apple intends this behavior. in fact, Apple's own support page contradicts that assertion:


macOS Sierra: Connect to shared computers and file servers on a network


I'm not talking about auto mounting a share but this issue exists when trying to connect manually to a network drive as well. I suspect the bug is security related in some way, but it's beyond me. Maybe 10.12.2 will address the issue.

Jan 4, 2017 12:06 PM in response to ChrisJenkins

This appears elsewhere in the thread, but just to reinforce, if 10.12.2 alone doesn't fix this problem for you (as, oddly, it seems to have for some), then in addition you (may!) need the advice here:

If you're asked to click Connect before reconnecting to a server - Apple Support

That seems to have fixed the prompting-at-login for me..

However, I don't know if it'll fix the occasionally dropped connections, failure to reconnect, or (program-crippling) "-1" naming of /Volumes/ mounts when they remount, or strange change-of-mountpoint-ownership when using auto_fs mounts....

-So I think I may pay my $6.99 and try http://www.pixeleyes.co.nz/automounter/index.html :-(

Oct 12, 2016 12:53 PM in response to ChrisJenkins

Hi,

I have this problem too. I have a qnap Nas and 3 macs, 2 with sierra and 1 with el capitan. On El Capitan it's all ok i do an Automator Application and add to login in.

On sierra, system always pops up the authentication dialogue. This is not good especially for one who use macmini like a mediaserver (itunes library and audirvana) without keyboard mouse and monitor connected.

Oct 14, 2016 8:01 AM in response to buddyjack2

I'm not at all complaining


you really should be, imo. it's core functionality that was removed (supposedly by intent). so in this situation you had to spend $ 10 to obtain an app that will restore that function. do you see where this is going ?


when i had bought my app, called Drive Mounter - more than a year ago - it was because i put my shares into login items. they auto-mounted fine, but i would always be presented with the finder window of that share after OS 10 mounted the shares. this is despite using the Hide toggle for them. When using Drive mounter for the shares, the Finder windows never appear when I log in and the shares mount. Whether this app is conflicting with or causing some subroutine errors in OS 10, I do not know. I know it takes a minute for both shares to mount on the desktop after a restart of the OS.


so what I really did was buy an app in order to compensate for a lack in functionality of the OS or an issue that was never addressed even though Apple is aware of that.


today we have these 2 issues together - and Apple is aware of that. or are they really ?


the goal of this thread is to get the issues fixed. hence, everyone's question is: WHEN ?

Oct 24, 2016 5:17 PM in response to zero7404

in the app store, security update 2016-002 just made itself available. i was reading thru the list of security "holes" it plugs. one in particular got my attention:


OpenSSH

Available for: OS X Mavericks v10.9.5, OS X Yosemite v10.10.5, and OS X El Capitan v10.11 to v10.11.3

Impact: Connecting to a server may leak sensitive user information, such as a client's private keys

Description: Roaming, which was on by default in the OpenSSH client, exposed an information leak and a buffer overflow. These issues were addressed by disabling roaming in the client.


does this impact connections with NAS drives ?


reminder: i am on OS X 10.11.6, not 10.12.

Oct 25, 2016 11:16 AM in response to zero7404

i decided to apply 2016-002 and so far the persistent authentication for connecting to my shares has not appeared - i am still using 10.11.6.


PleasantSpectrum,


i can see how apple would want to try to prohibit someone or a program which is not authorized from connecting to a network share, and that itself would be a great functionality of an OS.


sierra implementation is not working for us, we are connecting to a server with root privileges in the OS, which i think should be good enough to not have to worry much about unauthorized access to a home network NAS or other device.


has anyone ever encountered a situation like that where unauthorized access to their NAS happened from a mac or windows box within their network ?

Oct 25, 2016 8:47 PM in response to zero7404

I too only connect to my NAS, and after switching to Sierra, the automatic - without re-prompt for credentials was, and still is "Broke". But I did find one thing that fixed mine, and it was a program I read on another post here, called AutoMounter,...shouldn't have to use a third-party app for something that was working fine, but at least I'm connecting without that annoying re-prompt now.

Oct 26, 2016 11:53 PM in response to ChrisJenkins

We have this problem across our whole office too! We are very much regretting updating to Sierra. 😠


It can't be a "feature" as Apple claims because the logic is very flawed.


It totally contradicts the point of the keychain and saving credentials. If this new feature was intended to improve security then the user should be required to actually enter the credentials at the prompt, and saving should not be an option. However the since the credentials are saved in the keychain, this subsequent user interaction is absolutely unnecessary and makes no sense. It's only a nuisance to require user interaction for authentication where the credentials are already saved in the keychain.


Hence imho this is a BUG!

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

macOS Sierra always prompts for credentials for network drives

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.