Smartcard auth errors

Question

Hi all!
I've tried to set up smart card logon to mac os x mavericks. My SC is RuToken ECP 64Kb. My steps:
1. Installed opensc-0.13.0
2. Installed rutoken support poackage (include librtpkcs11ecp.so and tokend for RuToken)
3. Generated RSA/2048 keys on token
4. Created local openssl CA, created CSR signed with token key
5. Created certificate with local CA for token, put it in token.
6. In Keychain Access added CA certificate to Syste, keychain and made it trusted
7. In Keychain Access validated both CA and token certificate, no problems found.
8. Added certificate hash to my user via sc_auth
Login after restart works fine, I'm inserting key and password prompt changes to PIN prompt and after typing PIN I successfully enter my system, that's ok.
But, if I lock screen or try to unlock something in System Prefs - there's no password/PIN prompt and auth fails. In /var/log/system.log there's next messages logged:
Mar 26 14:13:52 localhost authorizationhost[634]: ignorableRevocationStatusCode entered.
Mar 26 14:13:52 --- last message repeated 1 time ---
Mar 26 14:13:52 localhost authorizationhost[634]: _CanIgnoreLeafStatusCodes return: true
Mar 26 14:13:52 localhost authorizationhost[634]: -[__NSArrayM length]: unrecognized selector sent to instance 0x7fc0e2600080
Mar 26 14:13:52 localhost authorizationhost[634]: *** Terminating app due to uncaught exception 'NSInvalidArgumentException', reason: '-[__NSArrayM length]: unrecognized selector sent to instance 0x7fc0e2600080'
    *** First throw call stack:
        0   CoreFoundation                      0x00007fff8d1d625c __exceptionPreprocess + 172
        1   libobjc.A.dylib                     0x00007fff9030fe75 objc_exception_throw + 43
        2   CoreFoundation                      0x00007fff8d1d912d -[NSObject(NSObject) doesNotRecognizeSelector:] + 205
        3   CoreFoundation                      0x00007fff8d1343f2 ___forwarding___ + 1010
        4   CoreFoundation                      0x00007fff8d133f78 _CF_forwarding_prep_0 + 120
        5   CoreFoundation                      0x00007fff8d0a9d48 CFStringCompareWithOptionsAndLocale + 72
        6   authorizationhost                   0x000000010fea53d9 SFBuiltinSmartCardSniffer_hint_user + 253
        7   CoreFoundation                      0x00007fff8d0cab76 __CFDictionaryApplyFunction_block_invoke + 22
        8   CoreFoundation                      0x00007fff8d0cab3c CFBasicHashApply + 124
        9   CoreFoundation                      0x00007fff8d0caa8d CFDictionaryApplyFunction + 173
        10  authorizationhost                   0x000000010fea57a7 SFBuiltinSmartCardSniffer_hint_user + 1227
        11  authorizationhost                   0x000000010fea227c nullPluginCreate + 1345
        12  libdispatch.dylib                   0x00007fff94f492ad _dispatch_client_callout + 8
        13  libdispatch.dylib                   0x00007fff94f51b76 _dispatch_barrier_sync_f_slow_invoke + 46
        14  libdispatch.dylib                   0x00007fff94f492ad _dispatch_client_callout + 8
        15  libdispatch.dylib                   0x00007fff94f50f03 _dispatch_main_queue_callback_4CF + 333
        16  CoreFoundation                      0x00007fff8d13d679 __CFRUNLOOP_IS_SERVICING_THE_MAIN_DISPATCH_QUEUE__ + 9
        17  CoreFoundation                      0x00007fff8d0f8954 __CFRunLoopRun + 1636
        18  CoreFoundation                      0x00007fff8d0f80b5 CFRunLoopRunSpecific + 309
        19  Foundation                          0x00007fff920e2adc -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 253
        20  Foundation                          0x00007fff921cb4aa -[NSRunLoop(NSRunLoop) run] + 74
        21  authorizationhost                   0x000000010fea844b main + 284
        22  libdyld.dylib                       0x00007fff8d44c5fd start + 1
Mar 26 14:13:52 localhost ReportCrash[635]: Metadata.framework [Error]: couldn't get the client port
Mar 26 14:13:52 localhost ReportCrash[635]: DebugSymbols was unable to start a spotlight query: spotlight is not responding or disabled.
Mar 26 14:13:53 localhost com.apple.authd[36]: engine[632]: evaluate returned -60008 returning errAuthorizationInternal
Mar 26 14:13:53 localhost com.apple.launchd[1] (com.apple.security.authhost.00000000-0000-0000-0000-0000000186A8[634]): Job appears to have crashed: Abort trap: 6
Mar 26 14:13:53 localhost ReportCrash[635]: Saved crash report for authorizationhost[634] version 1.0 (55194.4) to /Library/Logs/DiagnosticReports/authorizationhost_2014-03-26-141353_localhost.c rash
Mar 26 14:13:53 localhost ReportCrash[635]: Removing excessive log: file:///Library/Logs/DiagnosticReports/authorizationhost_2014-03-26-124352_loca lhost.crash
Are there any possible solutions to that?

Answer 1

Hi,
I had the same problem and after much digging (including disassembling the authorizationhost binary) I noticed that this is because the authorizationhost process assumes that the "RecordName" for a user in the Users directory is a string, and if you have associated your Mac account with an Apple ID, it will be an array, causing that crash (it attempts to send a "length" message to an array object).
In practice, at least for me I could solve this problem by going to System Preferences -> Users & Groups, selecting the user for which I have associated the smart card, clicking the "Change…" button next to "Apple ID:", and removing all Apple ID's from the list.
Note: I have tested this on two of my computers but I don't yet know what effects this may have to services that rely on an Apple ID to operate, but at least basic iCloud and Home sharing services seem to work fine..