Re: [Davmail-users] 2 Factor Authentication

[Scott S. <gu...@po...>]

On Thu, 10 Aug 2017 23:29:29 +0200
Geert Stappers <sta...@st...> wrote:

:On Thu, Aug 10, 2017 at 02:17:21PM -0700, Scott Smith wrote:
:> On Thu, Aug 10, 2017 at 08:07:12PM +0200, Geert Stappers wrote:
:> > > On Thu, Aug 10, 2017 at 07:52:01PM +0200, Geert Stappers wrote:
:> > > > > > On Mon, Aug 07, 2017 at 10:25:24AM -0700, Scott Smith wrote:
:> > > > > > > 
:> > > > USER emailaddres
:> > > 
:> > > Another '+OK' from POP should appear
:> > > 
:> > > > PASS password6digit
:> > > 
:> > > The 'password6digit' is  the password plus six digits.
:> > > 
:> > > Report the output.
:> > > 
:> 
:> Here is the output with a bit of ambiguity for the username and password
:> 
:> $ telnet 0 1110
:> Trying 0.0.0.0...
:> Connected to 0.
:> Escape character is '^]'.
:> +OK DavMail 4.8.0.3-2488 POP ready at Thu Aug 10 14:06:58 PDT 2017
:> USER sco...@ms...
:> +OK USER : sco...@ms...
:> PASS YYYYYYYYZZZZZZ
:> -ERR Authentication failed: invalid user or password
:
:Mmm, bummer, no simple password + 6 digits.
:
:
:> > > > > > > I have been using DavMail to access our company's Exchange Server
:> > > > > > > successfully for many months.  A week ago, the company implemented
:> > > > > > > 2 factor authentication using my username, password and a 6 digit
:> > > > > > > security token which changes every month.
:> > > > > > > Is there a way to configure DavMail and/or my e-mail client to be able
:> > > > > > > to send and receive e-mail with this kind of server setup?
:> > 
:> > Invest some time to explain this mailinglist how the webbrowser login
:> > works[1] since the addition of the security token.
:
:For getting a better picture where / how the second factor is prompted.
:
:
:Groeten
:Geert Stappers
:[1] 'works' as in "handled" or "operated". 


SLS: I have done a bit of research on the topic.  Key words are "modern authentication" (which are based on ADAL and OAuth 2.0).  I have not been able to find any technical specifications about the communicaiton between the server and the e-mail client.  I have a friend who is using Outlook to access the mail server I want to access via DavMail.  I think he may be able to supply me with the log of the interactions between his client and the server.  That may help us know what is being passed between the two and how.  I'll keep you updated as I know more.

===========   ><(((o>

Scott Smith
   Long Term Cross Cultural Farming, Fishing,
      and Body Building Consultants

    Frustrated with Windows?  Check out Linux!
      https://www.phws.info/linuxlowdown