Running OSX Mavericks, 10.9.2. Since upgrading FileMaker 13 Advanced to v2 a couple of days ago it will no longer recognize passwords stored in Keychain, or remember new ones that have been added. Anyone else seeing this?
I ran into a similar problem roughly a week ago. We changed our solution to work with Active Directory. When Mac users tried to log into the solution using their keychains, it did not work. The fix ended up being they had to clear their keychains and then restore them.
In 10.8.5 FMPA 13.0v2 everything works fine. I have a laptop with 10.9.2 and FMPA 13.0v2 and it does not remember the keychain credentials!
Wow... you have found a bug. I was certain you were wrong and just upgraded my laptop to v2 just to prove you wrong <haha>. But you were right. I wonder what is going on.
Did you “clear” them as individual lines via the Keychain app, or did you reset the user’s entire keychain?
When I was testing with my colleague, I am pretty sure he cleared the single keychain entry. I could not say what the users did. We told them to go to the Keychain location and clear out the line associated with our solution. I would say they only cleared the line, but they could have cleared the entirety as well.
From what Taylor has tested, it looks like Mavericks is causing some problems. I would like to confirm the experience as well, but we have not permitted the move to Mavericks as of yet.
OK, in my testing, removing the item individually from Keychains doesn’t work. When I log in again and check the box it doesn’t retain the password for the next login. For me, and I suspect for many who log in and out of dozens of different files a day this is a big issue.
Yes, this really sounds like a bug. This might not matter, but is the file you are trying to access local or on the server? I wonder if that makes any difference.
Looks like it’s the same either way.
Yes, I performed some tests on my side. One of my colleagues actually has Mavericks running. He had the same setup as you and did not encounter a problem. Let's see if we can narrow it down more. Have you tried running Keychain First Aid? This is within Keychain Access. Run that and see if that helps in any way.
We are encountering the problem with some of our users but not all of them. Resetting the Keychain is not solving it for me. I hope FM can fix this quickly.
By the way, for us, the problem started with 13.0v3 not 13v2. It worked fine before this new update.
One known flavor of this issue is caused by not restarting your system after applying the update.
And by resetting the Keychain do you mean that you edited / deleted the Keychain entry or did something else?
I think I had to delete that key from the keychain and then resale it at login. It's worked fine since then.
From the iPhone of Ron Smith
I deleted the keychain for a particular FM file. I did not restart the system. I will try that when I'm back in the office.
In most cases restarting after the update has solved the issue. In a few cases we needed to also delete individual keychain items for FM files and then restart. In all cases this is on OS 10.9.
Restarting the computer solved it for me. Thanks!
Tongue-in-cheek comment: This sounds like the much-sought-after security improvement we've all dreamed of, where users have to actually enter their credentials to open a secured file rather than just sitting down at a running computer while that staff person is on a bathroom break.
Actually, yes! I wish there were a way to disallow keychain access on a per-file basis.
Sent from my iPhone
There are two ways I know to do this within a specific file:
Both of these methods allow you as the developer to stop the use of stored credentials in the keychain for that specific file. It won't matter how many times the user ticks the save password or remember me box, the file itself will still bypass the keychain.
[Keep in mind that the password the user tried to store will still be recoverable from the system keychain, so there is still that somewhat obscure way someone else might exploit the built-in keychain security breach built into the OS if they know how to use the keychain utility.]
Retrieving data ...