Skip to content

Instantly share code, notes, and snippets.

@hjuutilainen

hjuutilainen/Fantastical log messages

Created November 19, 2013 11:47
Show Gist options
  • Save hjuutilainen/7544223 to your computer and use it in GitHub Desktop.
Save hjuutilainen/7544223 to your computer and use it in GitHub Desktop.
Download ZIP
Log messages by Fantastical (OS X)
Raw
Fantastical log messages
19.11.2013 13.41.32,403 secd[540]: securityd_xpc_dictionary_handler Fantastical[1799] copy_matching The operation couldn’t be completed. (OSStatus error -34018 - client has neither application-identifier nor keychain-access-groups entitlements)
19.11.2013 13.41.32,403 Fantastical[1799]: SecOSStatusWith error:[-34018] The operation couldn’t be completed. (OSStatus error -34018 - Remote error : The operation couldn‚Äôt be completed. (OSStatus error -34018 - client has neither application-identifier nor keychain-access-groups entitlements))
19.11.2013 13.41.32,406 secd[540]: securityd_xpc_dictionary_handler Fantastical[1799] copy_matching The operation couldn’t be completed. (OSStatus error -34018 - client has neither application-identifier nor keychain-access-groups entitlements)
19.11.2013 13.41.32,406 Fantastical[1799]: SecOSStatusWith error:[-34018] The operation couldn’t be completed. (OSStatus error -34018 - Remote error : The operation couldn‚Äôt be completed. (OSStatus error -34018 - client has neither application-identifier nor keychain-access-groups entitlements))
19.11.2013 13.41.32,406 secd[540]: securityd_xpc_dictionary_handler Fantastical[1799] copy_matching The operation couldn’t be completed. (OSStatus error -34018 - client has neither application-identifier nor keychain-access-groups entitlements)
19.11.2013 13.41.32,407 Fantastical[1799]: SecOSStatusWith error:[-34018] The operation couldn’t be completed. (OSStatus error -34018 - Remote error : The operation couldn‚Äôt be completed. (OSStatus error -34018 - client has neither application-identifier nor keychain-access-groups entitlements))
19.11.2013 13.41.32,409 secd[540]: securityd_xpc_dictionary_handler Fantastical[1799] copy_matching The operation couldn’t be completed. (OSStatus error -34018 - client has neither application-identifier nor keychain-access-groups entitlements)
19.11.2013 13.41.32,409 Fantastical[1799]: SecOSStatusWith error:[-34018] The operation couldn’t be completed. (OSStatus error -34018 - Remote error : The operation couldn‚Äôt be completed. (OSStatus error -34018 - client has neither application-identifier nor keychain-access-groups entitlements))
19.11.2013 13.41.32,410 secd[540]: securityd_xpc_dictionary_handler Fantastical[1799] copy_matching The operation couldn’t be completed. (OSStatus error -34018 - client has neither application-identifier nor keychain-access-groups entitlements)
19.11.2013 13.41.32,410 Fantastical[1799]: SecOSStatusWith error:[-34018] The operation couldn’t be completed. (OSStatus error -34018 - Remote error : The operation couldn‚Äôt be completed. (OSStatus error -34018 - client has neither application-identifier nor keychain-access-groups entitlements))
19.11.2013 13.41.32,412 secd[540]: securityd_xpc_dictionary_handler Fantastical[1799] copy_matching The operation couldn’t be completed. (OSStatus error -34018 - client has neither application-identifier nor keychain-access-groups entitlements)
19.11.2013 13.41.32,412 Fantastical[1799]: SecOSStatusWith error:[-34018] The operation couldn’t be completed. (OSStatus error -34018 - Remote error : The operation couldn‚Äôt be completed. (OSStatus error -34018 - client has neither application-identifier nor keychain-access-groups entitlements))
19.11.2013 13.41.32,424 secd[540]: securityd_xpc_dictionary_handler Fantastical[1799] copy_matching The operation couldn’t be completed. (OSStatus error -34018 - client has neither application-identifier nor keychain-access-groups entitlements)
19.11.2013 13.41.32,425 Fantastical[1799]: SecOSStatusWith error:[-34018] The operation couldn’t be completed. (OSStatus error -34018 - Remote error : The operation couldn‚Äôt be completed. (OSStatus error -34018 - client has neither application-identifier nor keychain-access-groups entitlements))
19.11.2013 13.41.32,425 secd[540]: securityd_xpc_dictionary_handler Fantastical[1799] copy_matching The operation couldn’t be completed. (OSStatus error -34018 - client has neither application-identifier nor keychain-access-groups entitlements)
19.11.2013 13.41.32,425 Fantastical[1799]: SecOSStatusWith error:[-34018] The operation couldn’t be completed. (OSStatus error -34018 - Remote error : The operation couldn‚Äôt be completed. (OSStatus error -34018 - client has neither application-identifier nor keychain-access-groups entitlements))
@krackers
Copy link

krackers commented May 7, 2022 •
edited
Loading

As you guys noted, this indeed seems to be an apparent bug in Maverick's calendar framework, which seemingly persisted all the way until maybe 10.10-ish. You can see slightly more info about the root cause in soffes/SAMKeychain#88 but essentially calling into CalendarStore indirectly ends up invoking keychain via the following stack trace


  * frame #0: 0x00007fff8b2b4a43 CalendarPersistence`-[CALKeychain loadKeychainInformationsForURL:realm:login:shouldDeleteEntry:] + 127
    frame #1: 0x00007fff8b2b46b6 CalendarPersistence`+[CalDAVAccount passwordWithScheme:login:host:path:port:] + 136
    frame #2: 0x00007fff8b31b5a7 CalendarPersistence`-[CalManagedCalDAVAccount retrievePasswordWithoutHavingPrincipalWithURLRegistered:] + 177
    frame #3: 0x00007fff8f4bf59d CalendarStore`+[CalGroup(CreationFromManagedObject) groupFromManagedObject:] + 1232
    frame #4: 0x00007fff8f4c65f8 CalendarStore`-[CalCalendarStore(CalCalendarStore_Private) calendarsWithPredicate:] + 595

Theere's a call to SecItemCopyMatching in loadKeychainInformationsForURL where the query dictionary has sync set to 1, which is appears to be what causes this based on the linked github issue. I can confirm that if this is set to 0 (e.g. by modifying value in lldb) the error no longer occurs, but even then it doesn't actually find any matching keychain entries (the SecItemCopyMatching call returns error not found) and so the method itself returns nil, so it doesn't seem like the method return value is actually used in any meaningful capacity.

And indeed, if we investigate what it's used for, the result is basically used to populate an object CalGroup which might be like CalGroup <0xfoobar> {UID = 1111-11123123-123123123; title = Google; type = CalDAV}. If a valid password was returned, it'd be part of the key/values, but if nothing was returned it's left out of there. And the clincher is that this CalGroup isn't even used in any meaningful sense since it's the calendars themselves we care about.

The various calendarstore methods eventually end up calling [CalCalendarStore calendarsWithPredicate], which basically does something like

// fetch all managed objects
for each idx in list:
   cal = CalCalendar calendarFromManagedObject:idx];
   if [idx group]
       group = [CalGroup groupFromManagedObject:idx];
       [cal setGroup: group]

so the password for the calendar group isn't even really relevant here, since all we care about is the grouping info.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment