Re: [Davmail-users] 2 Factor Authentication

[Geert S. <sta...@st...>]

On Thu, Aug 10, 2017 at 08:07:12PM +0200, Geert Stappers wrote:
> On Thu, Aug 10, 2017 at 07:52:01PM +0200, Geert Stappers wrote:
> > On Wed, Aug 09, 2017 at 02:28:34PM -0700, Scott Smith wrote:
> > > On Mon, 7 Aug 2017 21:53:05 +0200 Geert Stappers wrote:
> > > > On Mon, Aug 07, 2017 at 10:25:24AM -0700, Scott Smith wrote:
> > > > > 
> > > > > company implemented
> > > > > 2 factor authentication using my username, password and a 6 digit
> > > > > security token which changes every month.
> > > > 
> > > > I think that is a complete new challenge.

I think I was too enthousiastic


> > > I am sure this will be a challenge, but one worth pursuing.
> > 
> > Then pursuit ...
> > 
> > 
> > > Right now, in our company ... if we can't use DavMail to give Mac Mail,
> > > Thunderbird, Claws Mail, and other clients access to the server, we are
> > > left to either a Webmail interface or Outlook.  For those of us using
> > > Linux, Outllook is not an option (nor would I use it even if it were).
> > > I am sure other companies will be enabling the 2 factor authentication
> > > on their Exchange servers as well in the coming months and years,
> > > making this a potentially needed feature.
> > > 
> > > I have seen documentation about passing a username and a userid to
> > > the server through syntax such as:
> > > 
> > > 	username | userid
> > > 
> > > Perhaps a similar thing could be done with password | securitytoken.
> > > I expect the greatest challenge is simply getting details about how the
> > > Exchange Server handles 2 factor authentication in its implementation of
> > > pop3, imap and smtp.  Should this feature become a development target,
> > > I (and many others) would be ever so grateful.
> >  
> > 
> > telnet 0 1110
> 
> '0' as short notion of  localhost, might be replaced with address davmail server.
> '1110' port where davmail listens for the POP protocol.
> Expect output like
> | Trying 0.0.0.0...
> | Connected to 0.
> | Escape character is '^]'.
> | +OK DavMail 4.8.0-trunk POP ready at Thu Aug 10 19:59:24 CEST 2017
> 
> > USER emailaddres
> 
> Another '+OK' from POP should appear
> 
> > PASS password6digit
> 
> The 'password6digit' is  the password plus six digits.
> 
> Report the output.
> 
> 
> > STAT
> 
> Will report number messages upon succesfull login.
> 
> > QUIT
> 
> To leave the POP session.
> 
> 
> > > > > I have been using DavMail to access our company's Exchange Server
> > > > > successfully for many months.  A week ago, the company implemented
> > > > > 2 factor authentication using my username, password and a 6 digit
> > > > > security token which changes every month.
> > > > > Is there a way to configure DavMail and/or my e-mail client to be able
> > > > > to send and receive e-mail with this kind of server setup?

Invest some time to explain this mailinglist how the webbrowser login
works[1] since the addition of the security token.


Groeten
Geert Stappers
[1] 'works' as in "handled" or "operated". 
-- 
Leven en laten leven