Re: After Gmail, Microsoft too...
Peter von Kaehne <[email protected]> Sat, 22 Oct 2022 13:12:54 +0100
| Newsgroups | gmane.mail.getmail.user |
|---|---|
| Message-ID | <[email protected]> |
--Apple-Mail-460A4667-6E5E-46BD-8797-C674438F81F8 Content-Type: multipart/related; type="text/html"; boundary=Apple-Mail-A25557B1-A054-479A-B86A-51D10B3D0EDA Content-Transfer-Encoding: 7bit --Apple-Mail-A25557B1-A054-479A-B86A-51D10B3D0EDA Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable <html><head><meta http-equiv=3D"content-type" content=3D"text/html; charset=3D= utf-8"></head><body dir=3D"auto"><div style=3D"display: block;" class=3D""><= div style=3D"-webkit-user-select: all; -webkit-user-drag: element; display: i= nline-block;" class=3D"apple-rich-link" draggable=3D"true" role=3D"link" dat= a-url=3D"https://wiki.gnome.org/Apps/Evolution/EWS/OAuth2"><a style=3D"borde= r-radius:10px;font-family:-apple-system, Helvetica, Arial, sans-serif;displa= y:block;-webkit-user-select:none;width:300px;user-select:none;-webkit-user-m= odify:read-only;user-modify:read-only;overflow:hidden;text-decoration:none;"= class=3D"lp-rich-link" rel=3D"nofollow" href=3D"https://wiki.gnome.org/Apps= /Evolution/EWS/OAuth2" dir=3D"ltr" role=3D"button" draggable=3D"false" width= =3D"300"><table style=3D"table-layout:fixed;border-collapse:collapse;width:3= 00px;background-color:#E9E9EB;font-family:-apple-system, Helvetica, Arial, s= ans-serif;" class=3D"lp-rich-link-emailBaseTable" cellpadding=3D"0" cellspac= ing=3D"0" border=3D"0" width=3D"300"><tbody><tr><td vertical-align=3D"center= "><table bgcolor=3D"#E9E9EB" cellpadding=3D"0" cellspacing=3D"0" width=3D"30= 0" style=3D"font-family:-apple-system, Helvetica, Arial, sans-serif;table-la= yout:fixed;background-color:rgba(233, 233, 235, 1);" class=3D"lp-rich-link-c= aptionBar"><tbody><tr><td style=3D"padding:8px 0px 8px 0px;" class=3D"lp-ric= h-link-captionBar-textStackItem"><div style=3D"max-width:100%;margin:0px 16p= x 0px 16px;overflow:hidden;" class=3D"lp-rich-link-captionBar-textStack"><di= v style=3D"word-wrap:break-word;font-weight:500;font-size:12px;overflow:hidd= en;text-overflow:ellipsis;text-align:left;" class=3D"lp-rich-link-captionBar= -textStack-topCaption-leading"><a rel=3D"nofollow" href=3D"https://wiki.gnom= e.org/Apps/Evolution/EWS/OAuth2" style=3D"text-decoration: none" draggable=3D= "false"><font color=3D"#000000" style=3D"color: rgba(0, 0, 0, 1);">Apps/Evol= ution/EWS/OAuth2 - GNOME Wiki!</font></a></div><div style=3D"word-wrap:break= -word;font-weight:400;font-size:11px;overflow:hidden;text-overflow:ellipsis;= text-align:left;" class=3D"lp-rich-link-captionBar-textStack-bottomCaption-l= eading"><a rel=3D"nofollow" href=3D"https://wiki.gnome.org/Apps/Evolution/EW= S/OAuth2" style=3D"text-decoration: none" draggable=3D"false"><font color=3D= "#A2A2A9" style=3D"color: rgba(60, 60, 67, 0.6);">wiki.gnome.org</font></a><= /div></div></td><td style=3D"padding:6px 12px 6px 0px;" class=3D"lp-rich-lin= k-captionBar-rightIconItem" width=3D"36"><a rel=3D"nofollow" href=3D"https:/= /wiki.gnome.org/Apps/Evolution/EWS/OAuth2" draggable=3D"false"><img style=3D= "pointer-events:none !important;display:inline-block;width:36px;height:36px;= border-radius:3px;" width=3D"36" height=3D"36" draggable=3D"false" class=3D"= lp-rich-link-captionBar-rightIcon" alt=3D"favicon.ico" src=3D"cid:967E7D92-E= AE0-4AAA-A0FB-055BBB288D38"></a></td></tr></tbody></table></td></tr></tbody>= </table></a></div></div><br>This explains the App ID business better from an= Evolution perspective. I have no clue if this can be anywhere else replicat= ed but it does work with evolution. <div><br></div><div>I would think o= ne way of dealing with this is to create a chain of davmail and getmail and l= eave the authentication and app ID to davmail. I have used that in the past&= nbsp;</div><div><br><div dir=3D"ltr">Sent from my phone. Please forgive miss= pellings and weird =E2=80=9Ccorrections=E2=80=9D</div><div dir=3D"ltr"><br><= blockquote type=3D"cite">On 22 Oct 2022, at 12:51, Matthias Andree <matth= [email protected]> wrote:<br><br></blockquote></div><blockquote type=3D"c= ite"><div dir=3D"ltr">=EF=BB=BF<span>Am 22.10.22 um 02:39 schrieb Charles Ca= zabon:</span><br><blockquote type=3D"cite"><span>Marc Lobelle <marc.lobel= [email protected]> wrote:</span><br></blockquote><blockquote type=3D"cite">= <blockquote type=3D"cite"><span>I understand what to do with Gmail. However ,= my institutional mail</span><br></blockquote></blockquote><blockquote type=3D= "cite"><blockquote type=3D"cite"><span>(University of Louvain, Belgium) has b= een outsourced to Microsoft, and</span><br></blockquote></blockquote><blockq= uote type=3D"cite"><blockquote type=3D"cite"><span>Microsoft too changed its= authentification rules: from yesterday morning on,</span><br></blockquote><= /blockquote><blockquote type=3D"cite"><blockquote type=3D"cite"><span>my get= mail cannot any more fetch my mail @uclouvain.be.</span><br></blockquote></b= lockquote><blockquote type=3D"cite"><span>Okay, that's a pain. They've= turned off app passwords, too - is that</span><br></blockquote><blockquote t= ype=3D"cite"><span>Microsoft doing so for all users/clients, or is it just a= policy set by your</span><br></blockquote><blockquote type=3D"cite"><span>u= niversity?</span><br></blockquote><blockquote type=3D"cite"><span></span><br= ></blockquote><blockquote type=3D"cite"><blockquote type=3D"cite"><span> &nb= sp; If you used to fetch your mail programmatically from your own= app,</span><br></blockquote></blockquote><blockquote type=3D"cite"><blockqu= ote type=3D"cite"><span> this remains possible but the app= will have to support OAuth and to</span><br></blockquote></blockquote><bloc= kquote type=3D"cite"><blockquote type=3D"cite"><span> be r= egistered on the Azure portal. UCL admin consent may then be</span><br></blo= ckquote></blockquote><blockquote type=3D"cite"><blockquote type=3D"cite"><sp= an> required and may take up to 1-2 weeks for approval.</s= pan><br></blockquote></blockquote><blockquote type=3D"cite"><span>It's possi= ble to integrate getmail with a service that uses OAUTH2; see the</span><br>= </blockquote><blockquote type=3D"cite"><span>Gmail integration as an example= .</span><br></blockquote><blockquote type=3D"cite"><span></span><br></blockq= uote><blockquote type=3D"cite"><span>But this "register your app with the Az= ure portal" is trickier. The doc page</span><br></blockquote><blockquo= te type=3D"cite"><span>I found is here:</span><br></blockquote><blockquote t= ype=3D"cite"><span>https://learn.microsoft.com/en-us/azure/active-directory/= develop/quickstart-register-app</span><br></blockquote><blockquote type=3D"c= ite"><span></span><br></blockquote><blockquote type=3D"cite"><span>... and t= hat makes it sound like *I* have to get an Azure account and register</span>= <br></blockquote><blockquote type=3D"cite"><span>getmail as an application? &= nbsp;That doesn't make sense to me. Maybe it means the</span><br></blo= ckquote><blockquote type=3D"cite"><span>more obvious thing, which is that so= meone in your AD domain needs to register</span><br></blockquote><blockquote= type=3D"cite"><span>it as an allowed app, not sure.</span><br></blockquote>= <blockquote type=3D"cite"><span></span><br></blockquote><blockquote type=3D"= cite"><span>Because if it requires me to get an Azure account, you're unfort= unately out of</span><br></blockquote><blockquote type=3D"cite"><span>luck. &= nbsp;Not gonna happen.</span><br></blockquote><span></span><br><span>Yes, an= d write privacy/data protection policies down beforehand and</span><br><span= >whatnot (which is viable, but not sufficient) and jumping more hoops.</span= ><br><span></span><br><span>We all have Internet protocols and standards, in= cluding standards that</span><br><span>avoid clear-text passwords for authen= tication, or deferring</span><br><span>authentication to third parties---and= for a standard-compliant mail</span><br><span>server the exact maker and ty= pe of (well-behaved) client must not</span><br><span>matter, and in Marc's c= ase it *STILL* appears to be at the mercy of UCL</span><br><span>admins from= the cited reply above.</span><br><span></span><br><span>(And please nobody t= hink they were better off with fetchmail: same</span><br><span>situation. Sa= me hoops. Same decision about registration and similar</span><br><span>slipp= ery slopes. I would be happy to add OAuth2 code if *THAT* were the</span><br= ><span>actual obstacle, but it is not, the providers' policy decisions and</= span><br><span>other con- and restrictions are. To me it makes no sense to i= nvest into</span><br><span>technical means that leave the policy issues unso= lved, such as</span><br><span>registration or app-based permissions.)</span>= <br><span></span><br><span></span><br><span>--------------------------------= -------------------------------------</span><br><span>To unsubscribe, e-mail= : [email protected]</span><br><span>For additional comman= ds, e-mail: [email protected]</span><br><span></span><br></div><= /blockquote></div></body></html>= --Apple-Mail-A25557B1-A054-479A-B86A-51D10B3D0EDA Content-Type: image/vnd.microsoft.icon; name=favicon.ico; x-apple-part-url=967E7D92-EAE0-4AAA-A0FB-055BBB288D38 Content-Disposition: inline; filename=favicon.ico Content-Transfer-Encoding: base64 Content-Id: <967E7D92-EAE0-4AAA-A0FB-055BBB288D38> AAABAAEAEBAAAAEAIABoBAAAFgAAACgAAAAQAAAAIAAAAAEAIAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD///8DxL6zcaSbiduropL/z8rB1v///08A AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADh39oLfXJcvFNDJf9SQiT/UkIk/1JC JP+hmYn9////TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVEgvnU0/Jf9NPyX/W041 jk5AJWhNPyX/TT8l/8G9tM0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARz0mRUg9Jv9IPSb/ TkQu//Hw76SGfm4QSD0m3Ug9Jv9wZ1ahAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEM5J6hD OSf/Qzkn/0M5J/9oYVL/2tjUz////zVFOycTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAA+NifNPjYn/z42J/8+Nif/PjYn/0M7Lf+dmZL99/b2fgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAODImnTgyJv84Mib/ODIm/zgyJv84Mib/ODIm/29qYv/4+PdnAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAI+MhzM3MinqMi0k/zItJP8yLST/Mi0k/zItJP8yLST/paOfngAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAD06NCd+e3j0xcTCUy0pIp8sKCH2LCgh/ywoIf8sKCH/LCgh61VS TCUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmIx6lPTo29qqppy7Jyci9f315EV9cWFMsKCNXNTIt U8PCwab///9aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB4bUSUjH1MfHRmtUlFO/7a2tDxramfk 8vLyeh8dGYEfHRr/bm1q//b29oUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGRgVyjg3Ndsk IyFmGRgV/5iYl8sZGBWPGRgV/xkYFf9ycXD/////PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABUU Ex4VFBIgExIQVxIREP9WVlWsFBMRPhIREP0SERD/FBMS/8zMzH4AAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAA4ODQINDQxKDQ0MFQAAAAAMDAxYCwsLygsLC8RFRUQXAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAA//8AAP9/AAD8PwAA+Z8AAPHfAADw/wAA8H8AAPAfAAD4HwAA/j8AAP//AAD7zwAA/scAAP7n AAD//wAA//8AAA== --Apple-Mail-A25557B1-A054-479A-B86A-51D10B3D0EDA-- --Apple-Mail-460A4667-6E5E-46BD-8797-C674438F81F8--