Keychain named login

Many years ago I set my default keychain to a different name and of
course the password is different from my login password. All was well.

I have upgraded to Leopard, and during the update process, my default
keychain contents were copied to a new keychain named "login." I
deleted the keychain and made my old keychain the default; and all was
well.

I have applied the fixes as they come available, and one of the recent
fixes (10.5.1 I think) caused a keychain named "login" to appear again
(with the contents of the default keychain copied) and this time it
simply will not stay away. I delete it, and then it reappears at the
next boot. So far, it now comes back empty.

The original motivation for having a different default keychain name
was to protect the keychain contents. There was a security bulletin
that indicated that even with account password sync off, a password
reset would reset the password of the keychain named "login" as well.

Is there some setting that I missed which would keep the "login"
keychain from being created? Does anyone know if keychain password
security has been improved so that the password can not be reset?



Thanks,


--
John Holt

In article
,
John Holt <jdholt77_at_earthlink.net> wrote:

> Is there some setting that I missed which would keep the "login"
> keychain from being created? Does anyone know if keychain password
> security has been improved so that the password can not be reset?

If you set the Open Firmware password, and put a padlock on the Mac's
case so it cannot be opened, it'll block the ability to start up from a
different drive or partition, which ought to make it impossible for a
non-admin to reset your admin password.

(The padlock is necessary because it's possible to reset the firmware
password if you have physical access to the inside of the Mac.)

Details here:
<http://docs.info.apple.com/article.html?artnum=106482>