XcodesOrg / XcodesOrg/xcodes

unclear which password must be entered to finish installation when using smart card

Open
#283 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Swift
Stars
4.8k
Forks
182
Avg merge
2d 12h
Merged PRs (30d)
1

Description

I use smart card and sometimes macOS asks for its password for authentication instead of admin password / Touch ID. When password is asked by GUI dialog it's clear which one must be entered, but here it turned out that I was expected to enter the smart card password instead of the user password.

$ xcodes install --latest --experimental-unxip
Updating...
Latest release version available is 14.2
Apple ID: <redacted>
Apple ID Password: 
Two-factor authentication is enabled for this account.

Enter "sms" without quotes to exit this prompt and choose a phone number to send an SMS security code to.
Enter the 6 digit code from one of your trusted devices: <redacted>

Downloading with aria2 (/opt/homebrew/bin/aria2c)
(1/6) Downloading Xcode 14.2.0+14C18: 99 %
(2/6) Unarchiving Xcode (This can take a while)
Using experimental unxip. If you encounter any issues, remove the flag and try again
(3/6) Moving Xcode to /Applications/Xcode-14.2.0.app
(4/6) Moving Xcode archive Xcode-14.2.0+14C18.xip to the Trash
(5/6) Checking security assessment and code signing
(6/6) Finishing installation
xcodes requires superuser privileges in order to finish installation.
macOS User Password: 
Failed executing: `/usr/bin/sudo -S /usr/sbin/DevToolsSecurity -enable` (1)

Enter PIN for 'Andrey Filipenkov': Enter PIN for 'Andrey Filipenkov': 
sudo: no password was provided
sudo: a password is required

Last 4 lines are displayed in red. The Enter PIN for 'Andrey Filipenkov': looks like request for the smart card password (in GUI dialog it's displayed like that).

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Reproduce the issue with xcodes install --latest --experimental-unxip on macOS with a smart card configured. Start with the final installation step and its /usr/bin/sudo -S /usr/sbin/DevToolsSecurity -enable output. Done means the prompt clearly identifies whether it expects the macOS user password or smart-card PIN and the installation completes successfully.

Written by the indexing model from the issue text.

Assessment

Tech stack
macos, swift
Domain
cli, security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.