Re: Fwd: authentication fail

Am 23.06.24 um 08:56 schrieb Michael Pope:
> I am currently unable to collect mail from a mail provider.  This has
> worked in the past.  The line in the logs:
>     fetchmail: imap.themessagingco.com.au: WARNING: server offered STARTTLS
> but sslproto '' given.
> looks pretty suspicious.
>
> OS: Fedora 40 Linux
> Package: fetchmail-6.4.38-1.fc40.x86_64
> MDA: procmail, though it never gets called
> Command line: just "fetchmail", however .fetchmailrc is:
>
> poll imap.themessagingco.com.au protocol IMAP port 993
>    auth password
>    user "mpope" password "*********"
>    ssl sslproto tls1.2+ sslcertck
>    mda "/usr/bin/procmail -o -d mpope"
>
> LC_ALL=C fetchmail -V: attached as fet1.log
> LC_ALL=C fetchmail --nodetach -vvv --nosyslog: attached as fet2.log

I have received the logs off-list, and the crucial part is:

> fetchmail: SSL/TLS: using protocol TLSv1.2, cipher
> ECDHE-RSA-AES256-GCM-SHA384, 256/256 secret/processed bits
> fetchmail: IMAP< * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID
> ENABLE IDLE SPECIAL-USE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] imap
> ready - cma-tmc
> fetchmail: Protocol identified as IMAP4 rev 1
> fetchmail: will idle after poll
> fetchmail: found updated capabilities list
> fetchmail: imap.themessagingco.com.au: WARNING: server offered
> STARTTLS but sslproto '' given.
> fetchmail: IMAP> A0001 LOGIN "mpope" *
> fetchmail: IMAP< A0001 NO [AUTHENTICATIONFAILED] Authentication failed.
> fetchmail: IMAP> A0002 LOGOUT
> fetchmail: IMAP< * BYE Logging out
> fetchmail: IMAP< A0002 OK Logout completed.
> fetchmail: 6.4.38 querying imap.themessagingco.com.au (protocol IMAP)
> at Sun Jun 23 16:16:45 2024: poll completed

Meaning there is

1-  a genuine issue with authentication (did the service change login
policies? Did someone or something change your password without your
knowing? Opt in to two-factor authentication or app passwords? In such a
case, you should create that app password for your IMAP clients and use
the app password in fetchmail), this is something you need to actively
sort out.  It seems the starting point for your mail service provider
would be
https://support.themessaging.co/hc/en-au/categories/21520592100633-How-do-I
and then read through the pages linked underneath "Password and Security
Management".

This is unrelated to the warning you are seeing.


2- fetchmail misreporting the authentication failure with that WARNING
and confusing you.
The program behaves correctly and aborts the poll after authentication
failure, but the warning you've seen clearly is a bug.
I need to fix that for a future release. That's not just a five-minute
thing though because the authentication driver is a touch nontrivial for
a code - with a few more ifs and thens.

Thanks for taking the time to report this, I've made a Gitlab issue from it:
https://gitlab.com/fetchmail/fetchmail/-/issues/64

Best regards,
Matthias



_______________________________________________
Fetchmail-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fetchmail-users