views:

312

answers:

2

My software authorizes the user prior to booting Mac OS X (Tiger and Leopard.) I want to use SFAuthorizationPluginView to create a plugin to attempt to use our pre-boot authorization (cached securely) for user login to Mac OS X for single-sign-on capability. I have not yet validated if that will even work for Leopard, but am assuming I will be able to do it. (Dangerous, I know.)

The question is how can I do this for Tiger and will that solution work for Leopard?

I continue to research, if I find a solution I will share.

+1  A: 

What I'd expect to do is to change the /etc/authorization database to accept your authorization as sufficient, but the comments around system.login.console don't lead me to expect that would work. You could circumvent LoginWindow by providing your own login-like app which you bring up with launchd instead of com.apple.loginwindow, but that seems like using a sledgehammer to crack a nut.

Graham Lee
I am not sure I want to override loginwindow.app that much. Besides, we are not adding NEW credentials to Mac OS X, just passing those used in our pre-boot authentication into Mac OS X so the user need not login twice to the same computer if they match.
Fred Priese
definitely sounds like you want to change the login requirement in /etc/authorization to be a k-of-n thing, then
Graham Lee
A: 

While looking around after posting my question on several lists (here is the link to my SO post), I came across your question. I have the same problem, only that I am trying to do this on Snow Leopard (and maybe Leopard). Did you make any progress ? I managed to write a plugin which is being loaded, but I do not know how to forward the credentials and skip the login window screen. Did you find any useful resources ?

ajcaruana