macOS 10.13 17A362a: Changing local account passwords may cause new login keychain to be generated
Originator: | rtrouton | ||
Number: | rdar://34613608 | Date Originated: | 23-Sep-2017 04:28 PM |
Status: | Open | Resolved: | |
Product: | macOS + SDK | Product Version: | 10.13 17A362a |
Classification: | Serious Bug | Reproducible: | Always |
Summary: Whenever there is a mismatch between a local user’s login password and the keychain password, macOS High Sierra is automatically renaming the old keychain to login_renamed_#.keychain-dc and creating a new keychain without any user interaction or prompting. Steps to Reproduce: 1. Open Keychain Access 2. Under the Edit menu, select "Change password for keychain 'login'..." 3. Change the password of the keychain to be different from the account's login password 4. Log out of the account 5. Log back in Expected Results: Get prompted at the login window to update the keychain with the new password. Actual Results: Existing login keychain is renamed and new login keychain is created. Version: 10.13 17A362a Notes: Other ways to reproduce: 1. Logging in as another account and using the `passwd` command on the command line to change the local account's password. Result: New login keychain 2. Logging in as another account and using the "Users & Groups" preference pane's "Reset Password" function to change the local account's password. Result: New login keychain.
Comments
Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!