Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

macOS Sierra always prompts for credentials for network drives

Reposting because my original post was incorrectly marked as 'Solved'


At home we have several Macs that mount, on login, some SMB network drives from various servers (OS X Server and Synology NAS). The credentials (username and password) for the network drives are stored in the user's keychain by way of the 'remember this password in my keychain' option the very first time the drives was ever mounted. As a result a command like 'mount' command successfully mounts the drives without the user needing to interact with an authentication dialogue. This has been working just fine for the longest time an all the way up through OS X 10.11.6.


In Sierra, any attempt to mount a network drive always pops up the authentication dialogue. The password may be prefilled (presumably from the keychain) but the user still has to respond to the dialogue by clicking OK. This is a huge problem for me as it breaks loads of automation scripts that I have that rely on using 'mount' (the problem is not specific to mount however; the same issue occurs if you use something like Finder's 'Connect to Server' command).


I've tried deleting all the 'network password' keychain entries so that they get re-creqted (they do) but the problem behaviour still occurs.

MacBook Pro with Retina display, OS X El Capitan (10.11.5)

Posted on Oct 12, 2016 7:03 AM

Reply
54 replies

Oct 24, 2016 5:17 PM in response to zero7404

in the app store, security update 2016-002 just made itself available. i was reading thru the list of security "holes" it plugs. one in particular got my attention:


OpenSSH

Available for: OS X Mavericks v10.9.5, OS X Yosemite v10.10.5, and OS X El Capitan v10.11 to v10.11.3

Impact: Connecting to a server may leak sensitive user information, such as a client's private keys

Description: Roaming, which was on by default in the OpenSSH client, exposed an information leak and a buffer overflow. These issues were addressed by disabling roaming in the client.


does this impact connections with NAS drives ?


reminder: i am on OS X 10.11.6, not 10.12.

Oct 25, 2016 11:16 AM in response to zero7404

i decided to apply 2016-002 and so far the persistent authentication for connecting to my shares has not appeared - i am still using 10.11.6.


PleasantSpectrum,


i can see how apple would want to try to prohibit someone or a program which is not authorized from connecting to a network share, and that itself would be a great functionality of an OS.


sierra implementation is not working for us, we are connecting to a server with root privileges in the OS, which i think should be good enough to not have to worry much about unauthorized access to a home network NAS or other device.


has anyone ever encountered a situation like that where unauthorized access to their NAS happened from a mac or windows box within their network ?

Oct 25, 2016 8:47 PM in response to zero7404

I too only connect to my NAS, and after switching to Sierra, the automatic - without re-prompt for credentials was, and still is "Broke". But I did find one thing that fixed mine, and it was a program I read on another post here, called AutoMounter,...shouldn't have to use a third-party app for something that was working fine, but at least I'm connecting without that annoying re-prompt now.

Oct 26, 2016 11:53 PM in response to ChrisJenkins

We have this problem across our whole office too! We are very much regretting updating to Sierra. 😠


It can't be a "feature" as Apple claims because the logic is very flawed.


It totally contradicts the point of the keychain and saving credentials. If this new feature was intended to improve security then the user should be required to actually enter the credentials at the prompt, and saving should not be an option. However the since the credentials are saved in the keychain, this subsequent user interaction is absolutely unnecessary and makes no sense. It's only a nuisance to require user interaction for authentication where the credentials are already saved in the keychain.


Hence imho this is a BUG!

Oct 31, 2016 3:05 PM in response to ChrisJenkins

I don't think Apple intends this behavior. in fact, Apple's own support page contradicts that assertion:


macOS Sierra: Connect to shared computers and file servers on a network


I'm not talking about auto mounting a share but this issue exists when trying to connect manually to a network drive as well. I suspect the bug is security related in some way, but it's beyond me. Maybe 10.12.2 will address the issue.

Nov 2, 2016 7:15 PM in response to NewBartleby

shouldn't have to do that to have relatively painless share automounting.


i am disappointed looking at this situation and ppls responses - different ppl have different experiences and it hints varying degrees of fragmentation amongst different users. isn't apple supposed to stand for better ? regardless of mac mini, imac, macbook, etc... the same OS platform should work relatively the same on recent mac computers.


looking at the direction apple headed in with the macbook pro, it's obvious they no longer care much for the mac platform in general .... the new lineup introduced is disappointing imo (lacking CPU, lacking RAM, lacking SSD, etc., what's offered is not worth the asking price even with the macOS experience). how are audio and video pros supposed to do their work on a 16GB ram ceiling that is the same as some macbooks from nearly 4 years ago ? "they made it thinner" you might say and the serious mac users would say "who cares"


seeing that trend, i wouldn't place all my eggs in this nest as a primary OS, still keeping win10 running on the other partition for dependencies.

Nov 5, 2016 11:24 AM in response to NewBartleby

Uh, I've been having this problem too. Not only that, but my drives seem to be dismounting every so often.. not sure if its related or not. (Synology DSM 6.0.2-8451 Update 2) SMB or AFP are acting no different.


I'm trying to set a constant ping to see if my connections will stay. I can live temporarily with the login issue but the disconnects are creating real issues.


Might try the latest beta update Sierra as well and see if there are any changes.

macOS Sierra always prompts for credentials for network drives

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.