From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 65952158009 for ; Tue, 20 Jun 2023 08:55:33 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id DC7D8E08C4; Tue, 20 Jun 2023 08:55:27 +0000 (UTC) Received: from icp-osb-irony-out7.external.iinet.net.au (icp-osb-irony-out7.external.iinet.net.au [203.59.1.107]) by pigeon.gentoo.org (Postfix) with ESMTP id 130ECE0883 for ; Tue, 20 Jun 2023 08:55:25 +0000 (UTC) X-SMTP-MATCH: 0 X-IPAS-Result: =?us-ascii?q?A2AHAAAGaJFk/4NW69xaGgEBAQEBAQEBAQEDAQEBARIBA?= =?us-ascii?q?QEBAgIBAQEBQAmBMwQBAQEBCwGDI4FchFGRIy4Di1UQkgoUgREDVg8BAQEBA?= =?us-ascii?q?QEBAQEJOQsEAQGBU4MzAoYAJjUIDgECBAEBAQEDAgMBAQEBAQEDAQEBBQEBA?= =?us-ascii?q?QEBAQYDAYEdhS85DYYFAQEBAyMPAQVRCxgCAhEBAQESAgIhNhMGAgEBgnoBg?= =?us-ascii?q?igDMRStajh6gTKBAZ5pDYJSgRUtAYVOggeKCkJ9gRCBFScMA4J1PoEFAYEaG?= =?us-ascii?q?CoCAhh/EgERAgEIVwkCAwODC4JnBIIUhwWCP4JQhWUHbopLgShvgR6BInoCC?= =?us-ascii?q?QIRZ4EICF+BckACDVULC2OBHE6CBAICEScTDwUFTXgbAwcDgQUQLwcEMh4JB?= =?us-ascii?q?gkYGBclBlEFAi0kCRMVQQSDWAqBDD8VDhGCWis2PxtRggElBA4DGSsdQAIBC?= =?us-ascii?q?3A9NQkLHywBHgIpgVcwgUgKR6ANA4FUT2sGYkkQSBAtGyULCisiBQYLCwFHk?= =?us-ascii?q?hqRMYE0ngdwhBKLfI1ngSyFdgYPBC+FV5FKCJIvh1uQPo1bg3OQfIVugUEkA?= =?us-ascii?q?3AwcE0fGYMiCQlAGQ+HHIcPAQsLg1KQBmg7AgcBCgEBAwmIcCSCNAEB?= IronPort-Data: A9a23:ozGcx6jfFimOfqT46SqOEUKKX161DBEKZh0ujC45NGQN5FlHY01je htvDzvSaKyINmqgf94gbdizoB9TuMXWx9RgHAY6/3s0EitDo8adXoXFdhiqMXObIsaaHB0/v ptOYIWbd5xrFCfV/0v0YunqoFBCjqzZHbCU5MwomsxSqa6IbA971HqPTsZg2tYAbeCRWl/L4 5WoyyHmEAfN8yZuNW4J4L60phpqvfDj0BsVpVVWicpj5TcyrFFLSspHTU2NByGgGNIMQLTiH 7+rIIyRpws1wT98UrtJrZ6mKiXmcpaKVSCSh3xfXbSVgxQqjkTeBY5iaZLwwW8O49m4t4gZJ Odl7PRcei9wVkH4o9nxZjEDe81I0Qyqz5ecSZS3mZT7I0TuLyC2m602ZK08FdVwFu1fWQmi+ dREc2pVNkjra++emNqGpudQassLfJjwB5lE5Fdc6xrEPa8KW7TnZI7F3IoNtNswrpgm8ff2Y sMYbXxuahraaltLPVweDJ45me6pgBETcRUC8grT//FqpTiNilUqidABM/KMEjCObc9UmkKbj mPH+WnlRBcXKJqW1FJp91rw3bGWwXmlBdh6+LuQ2+U0ulCL4EUpVD5MXnqU8Ovjr0K1YocKQ 6AT0m90xUQoz2SkQ9/hWBr9vWWJpDYYWsFMCKs15QeRza2S5ByWblXoVRYbMoRj7pRrAGx0k wbSxpXlFDopsbyTRG7b8LqI6zqvUcQIEVI/ieY/ZVNty7HeTEsb13ojkv4L/HaJs+DI IronPort-HdrOrdr: A9a23:dVqjwaGcuNRzuRMtpLqEx8eALOsnbusQ8zAXPiFKJSC9F/byqy nAppsmPHPP5gr5IUtQ++xoWpPhfZqsz/9ICOAqVN/JMTUO01HYT72Kg7GSuwHIKmnT8fNcyL clU4UWMqyKMbB25/yKhDVRH7wbsb66GKrDv5a68561d3ANV0i31XYBNjqm X-Talos-CUID: 9a23:iMifpm5tvM+d4K0ildsspB8PIdp+LFvh6lzNExaUE0JNb5aacArF X-Talos-MUID: 9a23:KbGZ3Aot5uXUiXJCT3cezxx5av1l+4KHMhwuy54nlJiWbwl8MA7I2Q== X-IronPort-Anti-Spam-Filtered: true X-IronPort-AV: E=Sophos;i="6.00,256,1681142400"; d="scan'208";a="436142652" Received: from 220-235-86-131.dyn.iinet.net.au (HELO mail.infra.localdomain) ([220.235.86.131]) by icp-osb-irony-out7.iinet.net.au with ESMTP; 20 Jun 2023 16:55:22 +0800 Received: from localhost (mail.infra.localdomain [127.0.0.1]) by mail.infra.localdomain (Postfix) with ESMTP id 54CCA3AC507D for ; Tue, 20 Jun 2023 16:55:21 +0800 (AWST) X-Virus-Scanned: amavisd-new at localdomain Received: from mail.infra.localdomain ([127.0.0.1]) by localhost (mail.infra.localdomain [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ih5yQ1uODyBQ for ; Tue, 20 Jun 2023 16:55:11 +0800 (AWST) Message-ID: Date: Tue, 20 Jun 2023 16:55:10 +0800 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.10.0 Subject: Re: [gentoo-user] google SMTP with postfix - Password not accepted Content-Language: en-AU To: gentoo-user@lists.gentoo.org References: <13290188.uLZWGnKmhe@lenovo> From: William Kenworthy In-Reply-To: <13290188.uLZWGnKmhe@lenovo> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Archives-Salt: 9ad7dff3-c8e6-4b1a-a241-fb69bfe41170 X-Archives-Hash: 60792125227233b99a31b5c806b19c58 getmail can facilitate getting googlemail into postfix.  In my case, it fetches an mail then invokes sendemail to forward into postfix.  The docs for the google side of the equation are quite good. BillK On 20/6/23 16:30, Michael wrote: > On Tuesday, 20 June 2023 06:29:52 BST thelma@sys-concept.com wrote: >> Trying to send email via Google SMTP and postfix but getting authentication >> failed. >> >> white postfix/smtp[32223]: 62E5618008F: to=, >> relay=smtp.gmail.com[173.194.203.109]:587, delay=2390, >> delays=2390/0.01/0.29/0, dsn=4.7.8, status=deferred (SASL authentication >> failed; server smtp.gmail.com[173.194.203.109] said: 535-5.7.8 Username and >> Password not accepted. Learn more at?535 5.7.8 >> https://support.google.com/mail/?p=BadCredentials >> n3-20020aa78a43000000b00663b712bfbdsm4668932pfa.57 - gsmtp) >> >> relayhost = [smtp.gmail.com]:587 >> smtp_sasl_auth_enable = yes >> smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd >> smtp_sasl_security_options = noanonymous >> smtp_tls_CAfile = /etc/postfix/cacert.pem >> smtp_use_tls = yes >> >> /etc/postfix/sasl_passwd >> [smtp.gmail.com]:587 USERNAME@gmail.com:PASSWORD >> postmap /etc/postfix/sasl_passwd >> /etc/init.d/postfix restart >> >> The user and password are correct. > I think I know what the problem is - but I do not use postfix and can't > confirm it on my side: > > Since mid 2022 Google requires 2FA to allow login into their server. Until > then it used to be the case you could select in their security settings to > "Allow Less Secure Apps", generate an application specific password hash using > their GUI and use this in your mail client. For a year now you won't be able > to do this, unless you first provide a mobile phone number to Google. > > If you *must* use Google, they you'll have to login into their Google account > security panel, set 2FA, attempt to connect with your postfix client, create > an application pass code hash for your postfix via their GUI and use that as > your password in your postfix settings. If you change your IP address, or > your PC/client, or anything else Google are using to fingerprint and profile > your device, then you'll have to login again in their GUI to confirm you are > who you are and your client is a legitimate device owned by you. > > They have many relevant help pages to explain all this, so you should search > for specific guidance, or find another email provider with less onerous user > profiling demands. ;-) > > HTH