Re: After Gmail, Microsoft too...

On Sat, Oct 22, 2022 at 10:34:04AM +0000, Marc Lobelle wrote:
> De : Peter von Kaehne, 
> Envoyé : vendredi 21 octobre 2022 22:44
> À : Marc Lobelle

So not the mailinglist ...
(this email is sent to the ML)

> > On 21 Oct 2022, at 17:43, Marc Lobelle <[email protected]> wrote:
> > >
> > > Hello all,
> > >
> > > I understand what to do with Gmail. However , my institutional mail
> > > (University of Louvain, Belgium) has been outsourced to Microsoft,
> > > and Microsoft too changed its authentification rules: from yesterday
> > > morning on, my getmail cannot any more fetch my mail @uclouvain.be.
> > >
> > > Here is the mail received from the sysadmins:
> > >
> > >   /Dear all,
> > >
> > >   This is a reminder that from October 1t, Microsoft is disabling
> > >   basic authentication for the Exchange, POP and IMAP services.
> > >
> > >   This change seems now to be effective for the UCLouvain tenant. That
> > >   means you can't authenticate to those services using a clear
> > >   password (**even the application passwords**) anymore.
> > >
> > >   You need to configure your mail clients to authenticate using OAuth2
> > >   (also called modern authentication). Most of the modern email
> > >   clients support this feature.
> > >
> > >   In case of issues, please consider sending a mail to the service
> > >   desk ([email protected]) as we are not in charge of the institutional
> > >   mailboxes and will be of limited help.
> > >
> > >   If you used to fetch your mail programmatically from your own app,
> > >   this remains possible but the app will have to support OAuth and to
> > >   be registered on the Azure portal. UCL admin consent may then be
> > >   required and may take up to 1-2 weeks for approval.
> > >
> > >   Thank you for your understanding.
> > >
> > >   Your sysadmin team/
> > >
> > >   /
> > >   /
> > >
> > > When I tried to log on my web account to look at my mail via
> > > UCLouvain's webmail, I had to type a 6 digit code received in a sms.
> > >
> > > Apparently, the app-password is not accepted by microsoft, Using
> > > Oauth2 or OAuth  is mandatory. Is there a way to still be able to
> > > use getmail ?
> > >
> > 
> > MS checks - apart from the OAuth bit - an App ID which in turn is
> > then used to recognise and permit (or prohibit) access. MS publishes
> > Outlook’s ID and others. As long as the ID is a permitted one,
> > any app providing it can then interact with the server.
> > 
> 
> Thanks Peter,

[1]


> Do you know how to do that with getmail ? Where to put this ID in
> getmail's rc file ? How to have getmail's ID  whitelisted by microsoft
> ? Or may we just use Outlooks ID ? What is this then ? After that,
> may we use our "old" login and passwd ?


Time will tell which answers will show up.

As in: I hope there will be a constructive follow-up.
Preferable by a person that understands that the reply
will be read by people in other time zones[2] and from
archives.[3]


> Marc
 
 
Groeten
Geert Stappers

[1] I think that Marc owes Peter a sincere apology
for publishing a personal response at this mailinglist.
[2] Make it possible that they don't have to read all
    the messages that came in during the night.
[3] Make reading in the discussion order possible,
    reply **below** relevant text.
-- 
Silence is hard to parse