Every action prompts for password and Touch ID does not work

[freebrowser1]

Every action prompts for password and Touch ID does not work

[jkbullard]

@freebrowser1 - Please post the diagnostic info obtained by following the instructions at Read Before You Post.

[freebrowser1]

@freebrowser1 - Please post the diagnostic info obtained by following the instructions at Read Before You Post.

This is just about the app.
The checklist covers about when OpenVPN does not connect, but for mr VPN connection works normally, but at every start of Tunnelblick or changing / adding a new .ovpn file I have to fill in a password manually.

[jkbullard]

Sorry, I misunderstood.

Tunnelblick must get a computer administrator's authorization to add a configuration because configurations can contain scripts which run as root, and if a non-admin creates and installs such a configuration, they would be able to "escalate privileges" to become root.

The way Tunnelblick gets authorization is to ask macOS for it. It is actually macOS which is asking for the password, not Tunnelblick; Tunnelblick does not have access to the password. macOS gives Tunnelblick an authorization token, which it then uses to perform the privileged operations involved in installing a configuration.

There is a way to have Tunnelblick not prompt for authorization to install a "safe" configuration: Un-check the "Require administrator authorization to install all configurations" checkbox (which must be done with administrator authorization : ). If that is not checked, "safe" configurations (those which cannot invoke a script) can be installed without administrator authorization.

Tunnelblick also allows an admin to pre-authorize all actions for up to five minutes; just click the "Enter admin mode" button at the top of Tunnelblick's "VPN Details" window.

Unfortunately, the macOS mechanism that Tunnelblick uses to avoid having access to the password does not allow Touch ID, so we cannot offer that as an alternative.

Edited 2023-09-07 to add ", not Tunnelblick" to the third paragraph; to fix a typo, "as admin" => "an admin", in the fifth paragraph; and to radd "macOS" and remove parentheses from the last paragraph.

[freebrowser1]

Indeed, I think that it is a bug in macOS that the Touch ID does not always work and has nothing to do with Tunnelblick.