Read from keychain results in errSecItemNotFound 25300

Question

I store username & password using keychain, sometimes when I tried to get the password of the username, it told me errSecItemNotFound.

I keep that the password is always existed in keychain, so why it is not found?

Thanks.

Querulous

Something I encountered is as follows. User name get first letter capitalized due to misconfiguration of email field. Ex. [email protected]. But when I make api request backend save it as [email protected] and I save [email protected] in the in keychain as account but I try to delete [email protected] when logout. Silly mistake. Hope this help someone. – Veradia

Answer 1

Tony: that error is simply OSStatus error -34018 - client has neither application-identifier nor keychain-access-groups entitlements.

This could be happening as a result from using a nonstandard app signing method or some other problem with your entitlements. Make sure you're building simply out of Xcode and not using alternate signing methods unless you completely understand them.

Here

I see that keychain access groups entitlements a re not being set, since no access group is required. However how can there be no application-identifier? What does that mean anyways? And yes I'm simply letting xcode handling the signing. – Ondrej

Are you using a wildcard appid instead of a specific appid? – Here

should be a specific app id. Strange thing is error can never be consistently reproduced. – Ondrej

Answer 2

When reading the keychain, make sure you always build with a provisioning profile linked with the appId that used to create the keychain record.

Swot

I'm seeing the OSStatus -34018 error frequently. Any idea what that means? – Ondrej

Answer 3

@graver

http://opensource.apple.com/source/Security/Security-55471/sec/Security/SecBasePriv.h

errSecMissingEntitlement = -34018, /* Internal error when a required entitlement isn't present. */

Ariosto