On 2/1/11 9:38 PM, "William Smith" <[email protected]> wrote:


>On 2/1/11 4:15 PM, "Nee, Andrew (NIH/NIDCD) [C]" <[email protected]>
>wrote:
>
>>The problem in short:  When the user sends a secure email (digital
>>signature also attached), a prompt for an admin's username and password
>>appears in order to open the system keychain and so to send the email.
>>
>>[snip]
>>
>>I've seen this once before with another user, and to resolve the issue I
>>had to strip out the user's keychain and start from scratch, which I'd
>>rather not do again.
>
>Depending on what passwords the use stores in his keychain, removing his
>~/Library/Keychains/login.keychain file may not be such as big deal. You
>can safely test whether or not this will resolve the problem simply by
>moving it to the user's Desktop, logging out/in and testing Entourage.
>
>How was the user's certificate installed and who installed it? Did the
>user himself download it and place it into his own keychain store? Sounds
>like ownership of his keychain.login file may have been given someone
>else.
>
>Hope this helps!
>
>-- 
>
>William Smith
Thanks for the assistance William.  Though I was going to try your
suggestion, I first tried getting rid of some private keys (the ones that
appear to have random numbers) in the system keychain, as well as
Microsoft Intermediate Entities and MS Intermediate Certificates (which
repopulated after I had to re-install the PKI certs for the user, and then
it appeared to have worked.  But now my issue is with the guy's digital
signature, which is a separate issue that I hope our security guys can
handle.

Andrew

--
YouTalk mailing list
List information: http://www.entourage.mvps.org/support_options/list.html
List moderator: [email protected], [email protected]
To unsubscribe: mailto:[email protected]?subject=unsubscribe

Reply via email to