[app password does not work (at the moment)] (was: gmail+imap+smtp (oauth2))

[Uwe Brauer <oub@mat.ucm.es>]

[-- Attachment #1: Type: text/plain, Size: 3235 bytes --]

>>> "RP" == Robert Pluim <rpluim@gmail.com> writes:

>>>>>> On Tue, 10 May 2022 08:29:11 +0200, Uwe Brauer <oub@mat.ucm.es> said:
Uwe> I might give it a try but what is the syntax in teh authinfo file


Uwe> I am just digging in, not that clearly written or at least my use case
Uwe> is not easily found.

>>> Now Iʼm hurt, I tried to make those docs clear :-)

Uwe> Oops, I am deeply sorry 😱

> Humour over email never works very well. Iʼm not really hurt.

Very true, and I was not «deeply sorry» 😉

>>> If you tell me which bits are unclear, we can rework them.

Uwe> I will do in the next days, ok?

> ok

Uwe> Thanks for your information, that has been helpful

Ok, here we go 2nd of June, my private gmail account does not allow
access via imap using 995 or similar. Since this might be a problem
faced my other Emacs users, I think it is appropriate to discuss this
issue here.


So I tried to follow the instructions found in 
https://support.google.com/mail/answer/185833?hl=en#

I activate 2-step verification and I generate an app password. Now one
remark and one question

    1. The generated 16 char password is actually much *shorter* than my
       imap password. This is supposed to enhance security 🙃

    2. I am not sure I understand: do I have to generate such password
       each time I want to access, via gnus my gmail account? I hope
       not.

Now I changed my authinfo entries to this 

machine smtp.gmail.com login oub.oub.oub@gmail.com port 587 password  XXXX
machine gmail login oub.oub.oub password XXXXX port imaps


Where XXXX is the new app password freshly generated.


I followed what you told me 

,----
| 
|     Uwe> If so, could you please share your configuration.
| 
|     Uwe> Or are you saying it is simply to use
| 
|     Uwe> (setq gnus-select-method (list 'nnnil "")) 
|     Uwe> (setq gnus-secondary-select-methods nil)
|     Uwe> (setq gnus-secondary-select-methods
|     Uwe>       '(
|     Uwe> 	(nnimap "UCMgmail"
|     Uwe> 		(nnimap-address "imap.gmail.com")
|     Uwe> 		(nnimap-server-port 993)
|     Uwe>                 ;; (nnimap-authinfo-file "~/.authinfo.gpg")
|     Uwe> 		(nnimap-authinfo-file "~/.authinfo")
|     Uwe> 		(nnimap-stream ssl)
|     Uwe>                 ;;(nnimap-stream starttls)
|     Uwe>                 (nnimap-fetch-partial-articles "text/")
|     Uwe> 		(nnir-search-engine imap))))
| 
|     Uwe> And put in authinfo my app password instead my «normal» one?
| 
| Yes
| 
| Robert
`----

Be it as it may, it *does not work* 

Here is my gnus group buffer



    [ Imap Gmail 2408064 ] 
           *: nnimap+gmail:INBOX

And I cannot open the group INBOX, the message is 

Opening nnimap server on gmail...failed: NO (AUTHENTICATIONFAILED) Invalid credentials (Failure)


But the password is the app password.


So any help would be strongly appreciated. The other alternative is
using oath2. Gosh.


Uwe Brauer 



-- 
I strongly condemn Putin's war of aggression against the Ukraine.
I support to deliver weapons to Ukraine's military. 
I support the ban of Russia from SWIFT.
I support the EU membership of the Ukraine. 

[-- Attachment #2: smime.p7s --]
[-- Type: application/pkcs7-signature, Size: 5673 bytes --]