Issue with privileged Auth mechanisms macOS

Question

Created Jul ’24

Replies 1

Boosts 0

Participants 2

I am trying to develop a custom plugin. Below is my auth plugin plist. However, the mechanism marked as privileged is not being triggered by macOS. If I remove the privilege, it gets called. Any pointers on this? TestPlugin:MyLogin and TestPlugin:MyUser,privileged are my custom plugins.

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>class</key>
	<string>evaluate-mechanisms</string>
	<key>comment</key>
	<string>Login mechanism based rule.  Not for general use, yet.</string>
	<key>created</key>
	<real>728811899.153513</real>
	<key>mechanisms</key>
	<array>
		<string>builtin:prelogin</string>
		<string>TestPlugin:MyLogin</string>
		<string>TestPlugin:MyUser,privileged</string>
		<string>builtin:login-begin</string>
		<string>builtin:reset-password,privileged</string>
		<string>loginwindow:FDESupport,privileged</string>
		<string>builtin:forward-login,privileged</string>
		<string>builtin:auto-login,privileged</string>
		<string>builtin:authenticate,privileged</string>
		<string>PKINITMechanism:auth,privileged</string>
		<string>builtin:login-success</string>
		<string>loginwindow:success</string>
		<string>HomeDirMechanism:login,privileged</string>
		<string>HomeDirMechanism:status</string>
		<string>MCXMechanism:login</string>
		<string>CryptoTokenKit:login</string>
		<string>PSSOAuthPlugin:login-auth</string>
		<string>loginwindow:done</string>
	</array>
	<key>modified</key>
	<real>740052960.218761</real>
	<key>shared</key>
	<true/>
	<key>tries</key>
	<integer>10000</integer>
	<key>version</key>
	<integer>10</integer>
</dict>
</plist>

Answer 1

DTS Engineer OP

Apple

Jul ’24

I am trying to develop a custom plugin.

Have you already been in touch with DTS about your work? If not, please open a DTS code-level support request for this. When you create the request, indicate that you were referred by someone at Apple and make sure to include a link to this thread.

Once we’ve touched based officially, it’s likely that we’ll be able to continue this discussion in public here in the forums.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"