Unauthorized Keychain Access - System

When I opened up the keychain access from Utilities I found something very strange. Under "System" I found an access titled " F* Bush", kind="airport network access", keychain="system". It took place on the same day I switched and installed a new wireless modem router (model DLINK DSL-G624T). On that day I also synchronized with my MacbookPro, which had unauthorized access over 1 year ago from this same "user" due to no encryption on the wireless network (didn't work with MacbookPro and former Netopia router which is why I changed).
When I try to "show password" and enter the admin ID and password I get a message "kcproxy wants to use your confidential information stored in "f* bush" in your keychain. Do you want to allow access to this item?"
Should I be concerned about this? I currently have WAP security in place to block unauthorized access. Not sure if it is too late.

Thanks for the link -- the thread was most helpful. Since this all came about as a result of changing my Active Directory password on the corporate network, the info in that thread tends to confirm my suspicion that the system entry is overriding the entry that I changed.
I'm not sure that I agree with Jim R.'s commentary, though:
Nobody owns the system keychain really, not even root. The System keychain is a shared keychain the system uses the store items available for all user accounts on the computer. If it were owned by root and had the root password, then other accounts would need the root password in order to use it. The fact that it doesn't allow you to view stored passwords is a security measure. This way, users can use system-wide resources that have been set up without actually knowing the passwords, not even other admins.
The reason for having root is to be able to alter system resources that others can access. There are many other resources in the system that can be accessed by everyone but altered only by root. Now we can argue about whether others in the System Admin group can modify a resource, but root should definitely be able to access and alter every resource on the system; every other O/S I've used has at least one such account. Without it, you give up the ability to control your own system.
Thanks,
--Gregory

Similar Messages

  • No keychain access or system profiler or mail - very alarmed

    Today I repaired permissions and backed up my system to an external drive with silverkeeper 1.3. I also ran Macjanitor 1.2.1. I have been using OS 10.4.3 for about 3 weeks with no problem although just lately things seemed a little slow, which is why I was doing maintainance. Everything was working fine, includin Mail, after the maintenance. Shut down.
    Returned home, started up, Mail icon bounces once, won't open. System Profiler opens but won't run. Keychain access bounces in the dock once, stops. Safari is fine, so is Address book. Disk Utility can open but only gives me the option to restore a disk. The disk utility log says "No icon found for DMdisk object" This is getting VERY SCARY!
    Anyone have any ideas? I am pretty sure macjanitor was a dumb thing to do as it wasn't the latest version and maybe isn't tiger compatible.. Has it trashed something essential?
    Thanks
    Phoebe

    This crash followed a backup to an external drive. Didn't read the part in the instructions that say "always create a fresh backup after installing a new system"
    Had to reinstall then restore files from the backup.

  • Should the passwords in 'System keychain' (in Keychain Access) normally be accessible to the owner/administrator?

    Should the passwords in 'System keychain' (in Keychain Access) normally be accessible to the owner/administrator or not?
    If not, would it be possible to gain access via the Root Account?
    I can access the passwords in 'Login keychain' (in Keychain Access). But when I try to access the passwords in 'System keychain' I'm asked for the Keychain Access password! I've never set such a password. I've only ever used one password - my owner/administrator password. But this isn't accepted when I try to access the passwords in 'System keychain'.
    Please note, this question was previously posted in the OSX Tiger forum but no-one offered an answer
    Thanks,
    iHope

    Seems this is a characteristic of the system keychain.
    Check out this thread...and furtwanglerian's response....
    http://discussions.apple.com/thread.jspa?messageID=8767033&#8767033
    closed

  • Two System keychains in Keychain Access

    Hi there
    When I go into Keychain Access I see two 'system' keychains listed. I believe they are multiple references to the same keychain. Is this something I should worry about and might it affect system performance?
    Many thanks
    Paul Blake
    Macbook Mac OS X (10.4.8)

    it's still just one system keychain. you just opened it twice. this is quite harmless. if it really bothers you quit keychain access and delete the file /users/username/library/preferences/com.apple.security.plist. then start keychain access and there will be just one system keychain there.

  • Keychain Access is crashing my system

    I'm having a problem, the root of which I believe is Keychain Access.app. Not exactly sure when it started happening. I'm on a Dual 2.5 G5 PowerMac, 4GB RAM, 250GB HD, OS 10.4.10.
    Here's the progression of events:
    If I update an app that has passwords stored in my keychain (any app, Apple or 3rd party), the next time I open that app I'm greeted with the following message:
    Appname has been updated. Do you want to allow the new version to access the same keychain items (such as passwords) as the previous version?
    This change is permanent and affects all keychain items used by Appname.
    Don't Change/Change All
    If I click Change All the system pauses for a few moments and I get a message saying:
    Your startup disk is almost full.
    You need to make more space available on your startup disk by deleting files.
    ? Do not warn me about this disk again.
    And if I Get Info on my hard drive I can see that it has 138.37 GB available, which is correct.
    The system continues to act wonky until I restart. For example, I can't empty the trash because I do not have enough permissions. Any applications that require Keychain Access.app for passwords can't access their passwords. I can't even unlock the system prefs after this happens, it just hangs when I click the lock icon. Upon opening Keychain Access.app after the events described above (but before restarting) all of my keychains are missing! They come back after I restart. Before I restart, if I try to Fast User Switch to a different account, the system turns the screen-cube, but it never brings up a user list; instead it sits at a blue screen until I do a hard shutdown.
    This happens every single time an app wants to update my keychain, without fail. I've tried running Keychain First Aid, Disk First Aid, and fsck (in single user mode). I've repaired the permissions. I've installed system updates (10.4.10) since this started happening. I made a new user and opened an app that requires keychain to update, and I ran into the exact same problems.
    How can I fix this without resorting to Archive and Install? (Please don't just tell me to install Leopard---I'm going to do this eventually, and hopefully it will fix my problem, but I'm quite busy for the next few weeks and I can't take time enough away from my projects to do this.)

    Yep, tried that too.
    I don't have time to reinstall anything that might break in the Archive and Install process. Even if it's not likely that anything will break, I don't want to risk it. This computer is also currently being used to backup multiple TBs of data over the network. Guess I'll just A&I Leopard in a couple weeks.

  • MB Air won't let me sign in to iCloud from System Preferences. I reset Keychain Access and deleted Accounts plist. No problem signing in via web and on other Mac.

    Hi all.
    I've just been given an Air. I used Migration Assistant to transfer everything (which didn't work very well: no Contacts transferred and the Air Contacts application can't even open manually transferred Contacts Archive .vcf).
    Trying to transfer contacts led me to iCloud - I thought I could copy them from there. Then I discovered that I can't sign in to iCloud via System Preferences. I get two error messages. The most common one is 'you cannot sign in at this time'. I've tried every solution on the web: I reinstalled Yosemite. I reset Keychain Access. I deleted Accounts plist.
    The other message I occasionally get is 'This is a valid Apple ID but not an iCloud account'. It is: I'm logged on fine on my MBP, iPhone and iPad.
    Any ideas? Thanks in advance,
    Aida

    So - I have been having this same issue, and while it's not totally resolved for me, I have figured out what's causing it.  I am running a machine with two hard drives and to keep my documents on a separate drive from the OS/Applications, I used the Advanced Option to specify the location of my home drive for my user account under "Users & Groups".  I've found that if I reset this to the default path of /Macintosh HD/Users/{username}, that it works fine.  However Apple has a bug in that this functionality breaks when you specify your own home directory.  Hopefully, this will be addressed in an update.

  • System Keychain Access

    There's an item in the System keychain that I'd like to get in and examine / change -- its an item relating to wireless access to my corporate network. Unfortunately, none of the passwords I enter seem to be able to unlock the keychain (my own account which is an admin account, root itself). How do I get into System so I can maintain it?

    Thanks for the link -- the thread was most helpful. Since this all came about as a result of changing my Active Directory password on the corporate network, the info in that thread tends to confirm my suspicion that the system entry is overriding the entry that I changed.
    I'm not sure that I agree with Jim R.'s commentary, though:
    Nobody owns the system keychain really, not even root. The System keychain is a shared keychain the system uses the store items available for all user accounts on the computer. If it were owned by root and had the root password, then other accounts would need the root password in order to use it. The fact that it doesn't allow you to view stored passwords is a security measure. This way, users can use system-wide resources that have been set up without actually knowing the passwords, not even other admins.
    The reason for having root is to be able to alter system resources that others can access. There are many other resources in the system that can be accessed by everyone but altered only by root. Now we can argue about whether others in the System Admin group can modify a resource, but root should definitely be able to access and alter every resource on the system; every other O/S I've used has at least one such account. Without it, you give up the ability to control your own system.
    Thanks,
    --Gregory

  • System keychain appears twice in Keychain Access

    Taking a rare look at Keychain Access app and notced that the System keychain appears twice consecutively. Is this usual? I'm loath to try deleting anything as they're identical and afraid that trashing one will do them both. Any advice?
    cheers

    Hi Reverend,
    I wouldn't worry about it, I have a couple of Macs like that that I attribute to using Migration Assistant, (not sure), but have no problems with them in any way, shape, form or manner!

  • Keychain access application not working.

    keychain not working, click on the generic app. icon and it simply pops up and closes. reloaded osx10.4.3, but no results. anyone have suggestions?
    powerbook g4   Mac OS X (10.4.3)  

    Next step is to create a new admin user account, log into it, and see if the problem remains. If not, then it's a problem with the original account. If so, then the problem's system-wide.
    If the original account, you have two options: 1) try to find the corrupted file, maybe the com.apple.keychainaccess.plist file in ~/Library/Preferences/. Move it to the desktop, log out and back in, relaunch Keychain Access. If that doesn't work, then check all the .plist files with something like Preferential Treatment. 2) reset your prefs in the new account and eventually delete the original.
    If system-wide, then reinstalling the OS using the Archive & Install option, saving user and network settings, might be your only option, especially since reinstalling the combo update didn't fix the problem.

  • How do I overcome Keychain access "Access to this item is restricted".  I need to view a password stored in Keychain

    I am the adminstrator and only user of this MacBook.  I need to see an internet password which is not stored on my browser or email client.  When I go into Keychain Access and check the Show Password box it asks for Keychain password - that is no problem. Enter password, hit OK, then the message comes up Access to this item is restricted.  I have gone into File - Get Info and made it read and write to Administrsators, System, Wheel and myself but it still says Restricted.  Any ideas anyone PLEASE!!

    I posted the same question elsewhere, but after poking around I discovered the following, which might be helpful. 
    Open Keychain Access, which is in your Applications/Utilities folder.  There should be two sections on the left sidebar, Keychains and Category.  When I opened it, only the Category section showed, but I eventually found an arrow which expanded the Keychains section. 
    Choose Login in the Keychains section, and "Passwords" in the Category section.  Use the search field to find the program you need the password for, and double-click on it.  A window with that program's label will open.  Under the Attributes tab, click on the little Show Password checkbox.  You'll be asked for your admin password.  Once you've entered it, the password will appear in the Show Password field.
    As an aside, I thought this is what I was doing all along, so here's another thing I did before it started working:  I found Keychain First Aid and ran both the Verify and Repair options.  Both of these reported no problems, but it might have done something to encourage things to work right.*
    *As you can tell, I anthropomorphize my electronic devices.  It's the only way to cope with the way they misbehave.

  • Using "Keychain Access" as a Password Manager

    Hello All,
    While searching for a secure, trustworthy password manager I started wondering why I couldn't just use Keychain Access built into the Mac OS.
    I've tried others and they're all nice in their own way but why not use what's already there?
    Any suggestions, concerns or gotchas are welcomed.
    Thanks in advance for your time.
    IAV

    You can also change the security settings on your keychain and/or create additional keychains. So you might have one keychain with especially secure settings for certain items and another with less secure settings for others. Moreover, you can adjust some settings for each item within a keychain, as well.
    Or you can do what I do which is set up several keychains and then render the whole system entirely pointless by saving the passwords in your original keychain because you are terrified you'll forget them otherwise... (I don't actually know why I set them up this way...)
    My login password is not my keychain password and my keychain locks after a minute, I require a password to wake from sleep/screensaver (though this does not always work properly) and sensitive items require re-entry of the keychain password anyway. So you can set things up so your keychain is more secure if you want to, at the price of some increased inconvenience.
    - cfr

  • Two entries in Keychain Access with same name

    I created a new keychain called "new-system" using Keychain Access. I set the password of this keychain to something besides my login password. Then I read something that I would not have to keep entering the keychain password to unlock the keychain if I changed the keychain's password to be my login password. I did this.
    Now, when I invoke Keychain Access, I have two entries for "new-system" listed under keychains in the upper left. Each of these keychains takes a different password.
    What is happening?

    Hi V.K.
    There are 2 files in ~/users/'myname'/library/keychains/
    login.keychain and 'myname'.keychain
    In Keychain Access however, I have 2 x login and 1 x 'myname'.
    Thanks for your interest!
    (I also have 2 x login in every other account including root... and I've used the Keychain Access "First-Aid" etc. etc. on them in every possible combination)
    Message was edited by: vectr

  • Chinese characters in keychain access?!?

    Just installed Leopard and the appropriate updates on my wife's G5 ppc dual 2.5
    right at the bottom of the utilities Chinese writing appears. It is the keychain access app. I know this, as when I search for Keychain Access in Spotlight, it shows up as in the utils folder, and when I double-click it in Spotlight, the app opens in Chinese!
    The whole system seems to move to Chinese - e.g. the writing in the menu bar all becomes Chinese! Can anyone kindly help?
    I need to try and use the Keychain access as this computer won't automatically join the adsl network on waking. It's impossible to use it in Chinese, obviously, as I don't know a letter of Chinese. I am puzzled why on earth this is happening...

    thanks folks -
    no, it's not Chinese in the whole system, only keychain access
    tried the get info - English is missing - the answer would be, I imagine, in figuring out how to get English recognized by Keychain Access
    I unchecked all boxes in "international" in the sys prefs except English - but English still doesn't appear the languages section of the get info of Keychain Access
    Am considering doing a complete clean install but of course would rather not. A simpler solution would be really cool!

  • Create a Distribution Certificate as a p.12 file in Keychain Access not working?

    I need to create a Distribution Certificate as a p.12 file. I downloaded my ios_distribution.cer file from iOS Provisioning Portal/Certificates/Distribution/Download but this file will not install on my Keychain Access Certificates. Once installed I need to export as .p12. Why can't I install this .cer file to my keychain access? Thanks

    Hi EDUR142, did you find a way round this? If so, please let me know.
    I currently can see that these certificates are there in Keychain Access under System'Certificates'.
    However in System'Keys' the relevant keys are not there. And in Login'Keys' there are 4 keys that might be the correct ones: 2 public keys, 2 private keys. BUT they do not have an arrow on the left so I cannot see if the correct certificate is associated with them (as it described in the Adobe step by step guide to DPS pg19).
    If this is simliar to your issue last year, and you found a solution, pls reply. Thank you.

  • Keychain Access and password problems

    Simply stated, I can't save my mail passworld to the Keychain - tried clicking the "Save to Keychain" box (so Mail/Entourage asks me for my mail password every time) -
    Thrashed around in Keychain Access and tried First Aid - Verify and got:
    Verification started
    Checking keychain configuration for Perry & Jodi Collier (user ID=501)
    Home directory is /Users/pezjode
    Error: unable to communicate with the “securityd” process. Please restart your machine and try again. If this does not correct the error, you may need to reinstall the system software.
    Verification failed
    What is the "securityd" process? Any help on any of the above would be much appreciated!
    I seem to have had a lot of trouble with my system post 10.4.9 upgrade - very annoying.
    Cheers
    PowerBook G4 17 Mac OS X (10.2.x)

    Thanks for that, I deleted all references to keychains in /Library and logged back in, added a keychain for my username and all is now well.
    However, I've just started using MS Entourage (as the Mail program was also freaking out like Safari) and it seems that when I tell this application to save my mail password to the Keychain, it throws a spanner in the works...
    Might start a new thread on this one...
    cheers

Maybe you are looking for