[Users] More OAuth2 problems

[Richard]

> Date: Friday, April 22, 2022 13:30:49 -0700
> From: Geoffrey Leach <geoffleach.gl at gmail.com>
> 
> On Fri, Apr 22, 2022 at 11:16 AM Richard
>> 
>> 
>> > Date: Friday, April 22, 2022 10:56:43 -0700
>> > From: Geoffrey Leach <geoffleach.gl at gmail.com>
>> > 
>> > Back to the grind (sigh). Two laptops, both with up-to-date
>> > Fedora 35, both with internet access via (the same) Starlink
>> > connection. Following setup of OAuth2 in Claws 4.0 send and
>> > receive worked on both. Now both fail for both send and receive.
>> > Both laptops have working gmail accounts, but with different
>> > logins.
>> > 
>> > AFAIK both laptops have the samp claus settings, although
>> > different OAuth2 keys.
>> > 
>> > Suggestions for diagnosis/repair are, as always, received with
>> > gratitude.
>> > 
>> > Laptop A receive
>> > * Account 'gmail': Connecting to POP3 server:
>> > pop.gmail.com:995... [2022-04-22 10:38:07] POP< +OK Gpop ready
>> > for requests from 98.97.35.176 u197mb190363244jau
>> > [2022-04-22 10:38:07] POP> USER geoffleach.gl
>> > [2022-04-22 10:38:07] POP< +OK send PASS
>> > [2022-04-22 10:38:07] POP> PASS ********
>> > [2022-04-22 10:38:09] POP< -ERR [AUTH] Username and password not
>> > accepted. *** error occurred on authentication
>> > *** Authentication failed.
>> > Laptop A send - uplink at 100%
>> > * OAuth2 obtaining access token using refresh token
>> > * OAuth2 access token obtained
>> > * OAuth2 access token updated
>> > * Account 'gmail': Connecting to SMTP server:
>> > smtp.gmail.com:25... *** Session timed out. You may be able to
>> > recover by increasing the timeout value in
>> > Preferences/Other/Miscellaneous.
>> > 
>> > Laptop B receive same as Laptop a
>> > 
>> > Laptop B receiv* OAuth2 obtaining access token using refresh
>> > token * OAuth2 access token not obtained
>> > * OAuth2 access token not obtained
>> > * Account 'gmail': Connecting to SMTP server:
>> > smtp.gmail.com:465... [2022-04-22 09:05:29] SMTP< 220
>> > smtp.gmail.com ESMTP
>> > nt22-20020a17090b249600b001
>> > [2022-04-22 09:05:29] ESMTP> EHLO webster
>> > [2022-04-22 09:05:29] ESMTP< 250-smtp.gmail.com at your service,
>> > [98.97.35.176]
>> > [2022-04-22 09:05:29] ESMTP< 250-SIZE 35882577
>> > [2022-04-22 09:05:29] ESMTP< 250-8BITMIME
>> > [2022-04-22 09:05:29] ESMTP< 250-AUTH LOGIN PLAIN XOAUTH2
>> > PLAIN-CLIENTTOKEN OAUT
>> > [2022-04-22 09:05:29] ESMTP< 250-ENHANCEDSTATUSCODES
>> > [2022-04-22 09:05:29] ESMTP< 250-PIPELINING
>> > [2022-04-22 09:05:29] ESMTP< 250-CHUNKING
>> > [2022-04-22 09:05:29] ESMTP< 250 SMTPUTF8
>> > [2022-04-22 09:05:29] ESMTP> [AUTH XOAUTH2]
>> > [2022-04-22 09:05:29] ESMTP< 334
>> > eyJzdGF0dXMiOiI0MDAiLCJzY2hlbWVzIjoiQmVhcmVyIiw
>> > [2022-04-22 09:05:29] ESMTP> MAIL FROM:<SUSLEA491 at GMAIL.COM>
>> > SIZE=354 [2022-04-22 09:05:29] SMTP< 535-5.7.8 Username and
>> > Password not accepted. Learn
>> > [2022-04-22 09:05:29] SMTP< 535 5.7.8
>> > https://support.google.com/mail/?p=BadCre
>> > ** error occurred on authentication -- timeout
>> > *** Authentication failed:
>> 
>> 
>> Based on these log snippets, it appears that
>> 
>>   on laptop A ...
>> 
>>   - you are using an id/pw, not OAuth2, for pop (port 995) email
>>     retrieval.
>>   - for sending you are using OAuth2, but are are trying to
>>     connect to port 25, rather than 465. that will fail.
>> 
>>   on laptop B
>>    - there was no retrieval attempt,
>>    - you tried, but failed, to get an OAuth2 token for sending
>>      (on port 465).
>>       - it seems to fall back to id/pw, which failed, when OAuth2
>>         fails.
>> 
>
> OK. How would I manage to use an id/pw?
>

On the account/send and receive configuration pages there's an
"authentication method" pop-down button (in the middle and top
respectively) where you set the authentication selection for the
account. These are set independently, and for gmail should (assuming
you're trying to use OAuth2 rather than app-passwords) be set to
"oauth2".

The actual oauth2 setup and configuration is a separate option toward
the bottom of the list of the account configuration options.

[please reply (only) to the list. do not include my direct email
address. ... and ideally, please don't top-post.]