Re: fetchmail 7.0.0.alpha7 oauth authentication failure to outlook.office365.com

Hi Matthias, thanks for the reply. The access token was/is 2411 bytes.  I get the same result with alpha8. (Note: the alpha8 sources still identify themselves as alpha7).

Sincerely,

David

Apr 26 08:22:15 fetchmail: SSL/TLS: using protocol TLSv1.2, cipher ECDHE-RSA-AES256-GCM-SHA384, 256/256 secret/processed bits
Apr 26 08:22:16 fetchmail: POP3< +OK The Microsoft Exchange POP3 service is ready. [QwBIADIAUABSADEANwBDAEEAMAAwADIAOQAuAG4AYQBtAHAAcgBkADEANwAuAHAAcgBvAGQALgBvAHUAdABsAG8AbwBrAC4AYwBvAG0A]
Apr 26 08:22:16 fetchmail: POP3> CAPA
Apr 26 08:22:16 fetchmail: POP3< +OK
Apr 26 08:22:16 fetchmail: POP3< TOP
Apr 26 08:22:16 fetchmail: POP3< UIDL
Apr 26 08:22:16 fetchmail: POP3< SASL PLAIN XOAUTH2
Apr 26 08:22:16 fetchmail: POP3< USER
Apr 26 08:22:16 fetchmail: POP3< .
Apr 26 08:22:16 fetchmail: POP3> AUTH XOAUTH2
Apr 26 08:22:16 fetchmail: POP3< + 
Apr 26 08:22:16 fetchmail: POP3> [SHROUDED]
Apr 26 08:22:16 fetchmail: POP3< -ERR Authentication failure: unknown user name or bad password.
Apr 26 08:22:16 fetchmail: Authentication failure: unknown user name or bad password.
Apr 26 08:22:16 fetchmail: POP3> USER [email protected]
Apr 26 08:22:16 fetchmail: POP3< +OK
Apr 26 08:22:16 fetchmail: We've run out of allowed authenticators and cannot continue.
Apr 26 08:22:16 fetchmail: Authorization failure on [email protected]@MDW-efz.ms-acdc.office.com
Apr 26 08:22:16 fetchmail: POP3> QUIT
Apr 26 08:22:16 fetchmail: POP3< +OK Microsoft Exchange Server POP3 server signing off.
Apr 26 08:22:16 fetchmail: 7.0.0-alpha7 querying outlook.office365.com (protocol POP3) at Mon 26 Apr 2021 08:22:16 AM CDT: poll completed
Apr 26 08:22:16 fetchmail: Query status=3 (AUTHFAIL)
Apr 26 08:22:16 fetchmail: normal termination, status 3

-----Original Message-----
From: [email protected] <[email protected]> 
Sent: Sunday, April 25, 2021 4:10 AM
To: [email protected]
Cc: David Thompson <[email protected]>
Subject: Re: [Fetchmail-users] fetchmail 7.0.0.alpha7 oauth authentication failure to outlook.office365.com

Am 12.04.21 um 16:19 schrieb David Thompson via Fetchmail-users:
> I'm trying to get the latest fetchmail alpha to pop mail from Microsoft. I'm using the python O365 module to get an access token, and then using fetchmail's passwordfile option to pop the messages. I can access the email account fine using the O365 python module, but if I extract the access token from the FileSystemTokenBackend file for use with fetchmail, I get an authentication error. I've also verified that the extracted access token is good using Microsoft's tool (https://jwt.ms/). Here are my specifics (per the FAQ G3):
>
> Os: CentOS 7 (CentOS Linux release 7.9.2009 (Core))
> Compiler: gcc-4.8.5-44.el7.x86_64
> Command: fetchmail -v -f fetchmailrc
>
> My fetchmailrc is:
> poll outlook.office365.com proto pop3 auth oauthbearer
>         user '[email protected]' passwordfile '/opt/rt-oauth/[email protected]' sslmode wrapped
>
> fetchmail -V ... and fetchmail -vvv... outputs are attached.
>
> Any thoughts or suggestions are greatly appreciated.

David, how long is the "password" token?

ls -l /opt/rt-oauth/[email protected]

I have recently released fetchmail 7.0.0-alpha8 with an increased maximum password length of 10,000 bytes net, but the announcement hasn't made it through to the list yet, for reasons unknown (no bounce received yet), hence I am Cc:ing you (out of the ordinary).