• Re: [gentoo-user] Google pop3 authentication failure

    From spareproject776@21:1/5 to Walter Dnes on Mon Jun 13 15:50:02 2022
    They flushed all the app password creds and forced 2fa.
    Need to go through the accounts.google.com login to recover.

    On Mon, Jun 13, 2022 at 09:42:39AM -0400, Walter Dnes wrote:
    I started getting this today.

    fetchmail: Authorization failure on <myuserid>@pop.gmail.com
    fetchmail: For help, see http://www.fetchmail.info/fetchmail-FAQ.html#R15 fetchmail: Query status=3 (AUTHFAIL)

    The fetchmail URL is not helpful at all. Here's the stanza for Gmail
    in my .fetchmailrc. What do I do now?

    poll pop.gmail.com protocol pop3:
    username "<myuserid>" password "*********" is "<localID>" here
    ssl
    fetchall
    mda "/usr/bin/procmail -m ~/.mailfilter/.procmailrc":

    --
    Walter Dnes <waltdnes@waltdnes.org>
    I don't run "desktop environments"; I run useful applications


    --

    -----BEGIN PGP SIGNATURE-----

    iHUEABYKAB0WIQSOnJLhneCQVQKLZ/PEUxZpaTPuSQUCYqdN9AAKCRDEUxZpaTPu SRRKAQCxvKHLDdcRUOiEZZb51RHoRoQ53SitMahMO/YJBfJCQgD7BQ7XuHv9i6KL TQOVmZ9EN+H31gpQNGVJNiXOjrPPGQg=
    =Rj9O
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Walter Dnes@21:1/5 to All on Mon Jun 13 15:50:02 2022
    I started getting this today.

    fetchmail: Authorization failure on <myuserid>@pop.gmail.com
    fetchmail: For help, see http://www.fetchmail.info/fetchmail-FAQ.html#R15 fetchmail: Query status=3 (AUTHFAIL)

    The fetchmail URL is not helpful at all. Here's the stanza for Gmail
    in my .fetchmailrc. What do I do now?

    poll pop.gmail.com protocol pop3:
    username "<myuserid>" password "*********" is "<localID>" here
    ssl
    fetchall
    mda "/usr/bin/procmail -m ~/.mailfilter/.procmailrc":

    --
    Walter Dnes <waltdnes@waltdnes.org>
    I don't run "desktop environments"; I run useful applications

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Dale@21:1/5 to Walter Dnes on Mon Jun 13 18:00:02 2022
    Walter Dnes wrote:
    I started getting this today.

    fetchmail: Authorization failure on <myuserid>@pop.gmail.com
    fetchmail: For help, see http://www.fetchmail.info/fetchmail-FAQ.html#R15 fetchmail: Query status=3 (AUTHFAIL)

    The fetchmail URL is not helpful at all. Here's the stanza for Gmail
    in my .fetchmailrc. What do I do now?

    poll pop.gmail.com protocol pop3:
    username "<myuserid>" password "*********" is "<localID>" here
    ssl
    fetchall
    mda "/usr/bin/procmail -m ~/.mailfilter/.procmailrc":



    I ran into a failure a month or so ago.  See thread titled "Seamonkey automatic email download after switch to Oauth2" that I started.  I had
    to switch to Oauth2 to access my emails.  The switch itself went well
    enough, just ran into another issue afterwards.  I suspect you are going
    to have to change how it sends the user/password info as well.  At least
    it is something you should check into.  It may be something else. 
    Google is switching off less secure methods to send the password and
    such.  We got to adjust. 

    From what I've read, some don't like Oauth2 but I think it is all Google supports for now.  I guess they are switching off by region or
    something.  Others failed months ago, mine failed a month or so ago and
    now yours has failed. 

    Hope that helps.  If not, I tried.  lol

    Dale

    :-)  :-) 

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Dr Rainer Woitok@21:1/5 to you on Mon Jun 13 18:50:01 2022
    Walter,

    On Monday, 2022-06-13 09:42:39 -0400, you wrote:

    I started getting this today.

    fetchmail: Authorization failure on <myuserid>@pop.gmail.com
    fetchmail: For help, see http://www.fetchmail.info/fetchmail-FAQ.html#R15 fetchmail: Query status=3 (AUTHFAIL)

    See the thread with subject 'Google and "fetchmail" + "ssmtp"' between 2022-03-17 and 2022-04-06 on the "gentoo-user" mailing list.

    There's one big gotcha though: shortly before Google's 2022-05-30 dead-
    line for the switch to two-factor-authorization, the upstream maintain-
    ers of "fetchmail" decided to abandon the 7.0.0 release (coincidence?), causing the Gentoo maintainers to also drop "fetchmail-7.0.0" from Port-
    age.

    I ended up cloning the "git" source repository from

    https://gitlab.com/fetchmail/fetchmail.git

    checking out branch "remote/next", and then running

    export PREFIX=$HOME
    ./autogen.sh
    ./configure --disable-IMAP --mandir=$PREFIX/man
    make install

    which installs the man pages "~/man/man1/fetchmail.1" and "~/man/man1/ fetchmailconf.1" as well as the programmes "~/bin/fetchmail" and "~/bin/ fetchmailconf" in my home directory.

    But I think this will be only a temporary solution due to lacking maint-
    enance upstream. Looking around a bit I found "getmail" in the Portage repository which supports OAuth, but apparently only for IMAP. Bummer.

    Anybody knowing about a replacement for "fetchmail" which provides daem-
    on mode as well as POP and OAuth support, and also allows to directly
    feed the fetched mails into "procmail"?

    Sincerely,
    Rainer

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Neil Bothwick@21:1/5 to Dr Rainer Woitok on Mon Jun 13 21:30:01 2022
    On Mon, 13 Jun 2022 18:41:37 +0200, Dr Rainer Woitok wrote:

    Anybody knowing about a replacement for "fetchmail" which provides daem-
    on mode as well as POP and OAuth support, and also allows to directly
    feed the fetched mails into "procmail"?

    net-mail/getmail


    --
    Neil Bothwick

    Oops. My brain just hit a bad sector.

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCAAdFiEE8k9T/rX16EJxEKG692eFu0QSMJgFAmKnjg4ACgkQ92eFu0QS MJh1ag//RwUPEL4KVutb0Lyvf5XZgJyXQqYRI0SvgVaa3FlUh1hlidfLYBL78Ew8 dhZYhtc/LB1k7LRiE+I7x/b+EjuKekz0y4qfw8szKRaucvj4IvoDa6PD/8g9JUay k7MA1RY+3fVTKdiF5sewvvvNVSeT5iCSBRfSqCS7tcx79DKUisu0BoUEtx7P36nb 5aTMQk67own7IiGoJoM2Fr9H0FgKrYkHo4m/kSxdaCBbmBdAk6HlXXe9DcOISynt EnctPtU4jWTXngRB9tfrqLf1Pnp2JeFdkzjt2yVKwCm2yxuF+MFk57r/GnXxQAl9 6tDuAUuMkQ4x2ipuIPl9EuDk5NHOY0TLatjp5UCza7zugEGo39eGyEJ+ltk7s+Ri SAkqx0LPB0S6ngEF6BLXTt/Ug54SAuU7aVSXg5/U9O79ZWffpv/rQKOqtCjZyGqe L84/NOR5FaW/yPoW63O0TzhnMWA9GMO8y2jn4kynqYRgFi+nzYRhBVknJpZ40KEz J3L0suweFOilJxCrak1viQDlCDiY9fw71N4nkGZQ2qMyGUNlTXLFPdl+SHHr3lrF bJhYzsPIPou7YSZC8fzcGmFP/iIRdo20CM8JHBvPGLAaOJjMaPpYEK0GbBVsPX6L hUPmtSvY1KP8Jy6qxfLH+/WItF9xWseambTR7WImr4WO3DBeTFo=
    =YtiL
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Dr Rainer Woitok@21:1/5 to you on Tue Jun 14 10:00:01 2022
    Neil,

    On Monday, 2022-06-13 20:20:46 +0100, you wrote:

    ...
    Anybody knowing about a replacement for "fetchmail" which provides daem-
    on mode as well as POP and OAuth support, and also allows to directly feed the fetched mails into "procmail"?

    net-mail/getmail

    Do you know for sure? As mentioned in my original mail I was under the impression that OAuth is only available together with IMAP but not with
    POP3. See

    https://getmail6.org/configuration.html#configuring

    Sincerely,
    Rainer

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Neil Bothwick@21:1/5 to Dr Rainer Woitok on Tue Jun 14 16:30:01 2022
    On Tue, 14 Jun 2022 09:52:19 +0200, Dr Rainer Woitok wrote:

    Anybody knowing about a replacement for "fetchmail" which provides
    daem- on mode as well as POP and OAuth support, and also allows
    to directly feed the fetched mails into "procmail"?

    net-mail/getmail

    Do you know for sure? As mentioned in my original mail I was under the impression that OAuth is only available together with IMAP but not with POP3. See

    https://getmail6.org/configuration.html#configuring

    Good point, it's that long since I set up getmail, I had to check if it
    was using IMAP or POP, and I'm using it with IMAP. Is there a reason you
    can't or won't use IMAP?


    --
    Neil Bothwick

    Q: Why is top-posting evil?
    A: backwards read don't humans because

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCAAdFiEE8k9T/rX16EJxEKG692eFu0QSMJgFAmKomTQACgkQ92eFu0QS MJiU1w/+PXhBW1ValDsrAhfkDx7oLjd4pFF9fbAQ7pHNH+9byA8en7I8IQRHX99H RrXi3Ycx66hdO76MEiXBaBtI2A51hlg1oA/UVM5+3WcoickXiqdA9CPR1gGBU5Ck wttys/BIjU7cQac0IAzqvsXgT53O+SY1NQ0mTKNDEr8itchSXE1nqch/Q2DuhCKw rIz6As85TnHq9T3e/UvFIQVBDdmRuFcEhCCL2hDpL1oWaWXKl6Rp1HrIT4ar2F+q fJWylKO/JW3NVt6Hah9LFt3uqs9rZgs8j5nrtsc8+EiEAYNPzKnqkxw0BxGWF4bI rU1kT8LincwWhptr3rcGrOuScH9+Z7xwGCYWiw8L09YRiOxIFMMtVd1HMptEdDkn 10LflFj6lO6nDXO2G8P3I1O8TGxo2Kj3D7j4tEx7r/y9e0Z5H4yu1cGGBe2lIrLJ Rkeo8tLik8bRI/NEFOQoom4Wyow/V7Z0ldidLjJ2q6GO5uV1D5JA66CKYLjOwXNA KyoqtYnGJmeGdQoEoMtt+oIARqd65gQpmDFFFXZDhhBtcwjXlUlfUDA6kRXvK+TW sl+g0z9RQC9cPXQyGo6MBq04XrJH61OFNRLnt6/IteGfx3FqvesN3T6CLIfRuo8C mZqjULKDSBc8NbkB7msDaUd+sx4mXZ66twFBzxu2dTKBKv42/I8=
    =vbdE
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Dr Rainer Woitok@21:1/5 to you on Fri Jun 17 17:40:01 2022
    Neil,

    On Tuesday, 2022-06-14 15:20:36 +0100, you wrote:

    ...
    https://getmail6.org/configuration.html#configuring

    Good point, it's that long since I set up getmail, I had to check if it
    was using IMAP or POP, and I'm using it with IMAP. Is there a reason you can't or won't use IMAP?

    Well, the reason for using "fetchmail" at all is probably historical: It
    was the only available mail retrieval utility on Sun's Solaris way back
    in time. I am used to (and sort of depend on) running "fetchmail" as a
    daemon as well as using the "dropdelivered" directive provided by it for
    POP3 which causes fetched mail to be deleted on the server.

    But I've meanwhile seen that "getmail" provides the "--delete" command
    line option for that. And regarding the daemon mode I could whip up a
    shell script which runs "getmail" together with a "sleep 60" command in
    an infinite loop. So I could probably give it a try.

    Sincerely,
    Rainer

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Walter Dnes@21:1/5 to All on Wed Jun 29 23:50:01 2022
    On Mon, Jun 13, 2022 at 02:47:16PM +0000, spareproject776 wrote

    They flushed all the app password creds and forced 2fa.
    Need to go through the accounts.google.com login to recover.

    Sorry for the delay responding. I can login fine with my password on accounts.google.com but it does not work on pop.gmail.com. What exactly
    do I have to do to get it working again?

    --
    Walter Dnes <waltdnes@waltdnes.org>
    I don't run "desktop environments"; I run useful applications

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Grant Edwards@21:1/5 to Walter Dnes on Thu Jun 30 00:30:01 2022
    On 2022-06-29, Walter Dnes <waltdnes@waltdnes.org> wrote:
    On Mon, Jun 13, 2022 at 02:47:16PM +0000, spareproject776 wrote

    They flushed all the app password creds and forced 2fa.
    Need to go through the accounts.google.com login to recover.

    Sorry for the delay responding. I can login fine with my password on accounts.google.com but it does not work on pop.gmail.com.

    Google disabled the use of normal passwords for IMAP and POP
    authentication a year or so back.

    [These days I say "a year or so back" that could be anything from 5
    months to about 5 years. I think "a couple years ago" now averages at
    about 7. "Five or six years ago" reaches back to the end of the
    Clinton adminstration.]

    What exactly do I have to do to get it working again?

    AFAIK, you've got two choices.

    1. Use an "app password"

    https://support.google.com/accounts/answer/185833
    https://www.lifewire.com/get-a-password-to-access-gmail-by-pop-imap-2-1171882

    2. Use OAUTH 2.0

    https://developers.google.com/gmail/imap/xoauth2-protocol
    https://oauth.net/2/

    AIUI, the latter is considered more secure. But, a lot of applications
    don't support OAUTH 2.0 (or if they do, it's via a complex
    plugin/helper scheme). For mutt I looked into OAUTH, and it can be
    done with some external helper applications. Creating an app password
    for mutt to use with IMAP was much easier.

    --
    Grant

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Walter Dnes@21:1/5 to Grant Edwards on Thu Jun 30 03:40:01 2022
    On Wed, Jun 29, 2022 at 10:26:55PM -0000, Grant Edwards wrote

    AFAIK, you've got two choices.

    1. Use an "app password"

    https://support.google.com/accounts/answer/185833
    https://www.lifewire.com/get-a-password-to-access-gmail-by-pop-imap-2-1171882

    2. Use OAUTH 2.0

    https://developers.google.com/gmail/imap/xoauth2-protocol
    https://oauth.net/2/

    I looked at those instructions and also at setting up mutt, which I
    currently use. Clear as mud. After scratching my head for several
    minutes, I really wanted to scrap my Gmail account altogether, but it
    might screw up some other stuff I do with Google. I very rarely use
    Gmail, and I do know how to access Gmail via web browser. So I
    commented the Gmail stanza out of my .fetchmailrc and I'll use web
    browser to access Gmail.

    --
    Walter Dnes <waltdnes@waltdnes.org>
    I don't run "desktop environments"; I run useful applications

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Grant Edwards@21:1/5 to Walter Dnes on Thu Jun 30 16:30:01 2022
    On 2022-06-30, Walter Dnes <waltdnes@waltdnes.org> wrote:
    On Wed, Jun 29, 2022 at 10:26:55PM -0000, Grant Edwards wrote

    AFAIK, you've got two choices.

    1. Use an "app password"

    https://support.google.com/accounts/answer/185833
    https://www.lifewire.com/get-a-password-to-access-gmail-by-pop-imap-2-1171882

    2. Use OAUTH 2.0

    https://developers.google.com/gmail/imap/xoauth2-protocol
    https://oauth.net/2/

    I looked at those instructions and also at setting up mutt, which I
    currently use. Clear as mud.

    OAUTH is pretty complicated.

    However, setting up an app password is very simple. It only takes a
    few clicks. Quoting from the google support page (first link above):

    1. Log in to your Google Account.
    2. Click "Security".
    3. Click "App Passwords".

    That brings up the App Paswords page

    4. Select app (pick app from dropdown, you want "Mail")
    5. Select device (pick device from dropdown, pick whatever you want, I recommend custom)
    6. Click "Generate"

    That will pop up a dialog containing a 16-character password to be used by fetchmail. Copy that password

    7. Click "Done"

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Walter Dnes@21:1/5 to Grant Edwards on Fri Jul 1 02:40:01 2022
    On Thu, Jun 30, 2022 at 02:29:03PM -0000, Grant Edwards wrote

    OAUTH is pretty complicated.

    However, setting up an app password is very simple. It only takes a
    few clicks. Quoting from the google support page (first link above):

    1. Log in to your Google Account.
    2. Click "Security".

    This doesn't do anything. It leaves me at the same page. I do not
    see "App Passwords". I've tried this with both Pale Moon and
    Google-Chrome. Now what?

    --
    Walter Dnes <waltdnes@waltdnes.org>
    I don't run "desktop environments"; I run useful applications

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Daniel Pielmeier@21:1/5 to All on Fri Jul 1 06:40:01 2022
    Am 1. Juli 2022 00:33:52 UTC schrieb Walter Dnes <waltdnes@waltdnes.org>:
    On Thu, Jun 30, 2022 at 02:29:03PM -0000, Grant Edwards wrote

    OAUTH is pretty complicated.

    However, setting up an app password is very simple. It only takes a
    few clicks. Quoting from the google support page (first link above):

    1. Log in to your Google Account.
    2. Click "Security".

    This doesn't do anything. It leaves me at the same page. I do not
    see "App Passwords". I've tried this with both Pale Moon and
    Google-Chrome. Now what?


    It is only available if Two Factor Authentication is also enabled. Everything is documented on the support pages.

    https://support.google.com/accounts/answer/185839?hl=en https://support.google.com/accounts/answer/185833?hl=en


    --
    Best regards
    Daniel

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)