It just started working "magically". I tried manually creating an account and associating it with a GnuCash account. Then tried getting the balance and got an error that I had the account number wrong. So I went back into the AQBanking Wizard and executed Retrieve Account List to get the full account number. Now when I went over to the accounts tab my accounts are there! I was able to associate them with the right GnuCash accounts and it seems to be working.
I went back through my setup and deleted my aqbanking user and wrote up the steps that worked. It seems there is something about needing a dummy account created, otherwise aqbanking won't save the account information that it retrieved. Here are the steps, note the bit about a dummy account. * Tools -> Online Banking Setup... * Create User * Next * OFX-DirectConnect backend * Run * Next * Select * USAA * Select bank and click OK * Next * Enter USAA number with zeros on the left to make the number 9 digits for the User Name and the User Id * Next * Next * Next * Retrieve Account List * Enter PIN * Finish * Click on the Accounts tab * If it's empty, create a dummy account using the aqofxconnect backend * OK * Leave everything blank * OK * Dismiss message about unable to update * Users * Edit User * Bank Settings * Retrieve Account List * Close * Click on Accounts tab and see the new accounts, delete the dummy account * Close * Next * Associate to GnuCash accounts, looking at the account number works well * Next * Apply * Test by opening a GnuCash account that was associated with USAA * Actions -> Online Actions -> Get Balance * See the balance show up in a dialog On Mon, 2020-05-25 at 13:21 -0500, Jon Schewe wrote: > Thank you for your help thus far. > > I noticed that I had AQBanking and GnuCash installed both inside and > outside flatpak. I've removed the version outside flatpak, but that > didn't help. > > If there are some additional debugging steps that are suggested for > checking aqbanking, let me know and I can see where the integration > with GnuCash is breaking. > > On Mon, 2020-05-25 at 09:47 -0700, John Ralls wrote: > > Well, that's progress. The communication with USAA is clearly > working. > > Maybe the flatpak sandbox isn't letting GnuCash see the results from > AQBanking. Unfortunately I don't have time to investigate this > further today. > > Regards, > John Ralls > > > > On May 25, 2020, at 9:29 AM, Jon Schewe <jpsch...@mtu.net> wrote: > > John, > > Using those settings got me different information in the dialog. > However I still don't have an option to associate the accounts. When > I close the dialogs I'm back to "Start Online Banking Wizard" and the > match step is still grey. > > 11:24:16 Saving communication log to 1 > 11:24:16 Sending request... > 11:24:16 Using GnuTLS default ciphers. > 11:24:16 TLS: SSL-Ciphers negotiated: TLS1.3:ECDHE-RSA-AES-256- > GCM:AEAD > 11:24:16 Waiting for response... > 11:24:17 Saving communication log to 1 > 11:24:17 Parsing response... > 11:24:17 Status for signon request: Success (Code 0, severity "INFO") > The server successfully processed the request. > 11:24:17 Status for account info request: Success (Code 0, severity > "INFO") > The server successfully processed the request. > 11:24:17 Received account XXXXXXXXX/XXXXXXXXXX ((no bank > name)/ACCOUNT) > 11:24:17 Received account XXXXXXXXX/XXXXXXXXXX ((no bank > name)/ACCOUNT) > 11:24:17 Received account (no bank code)/XXXXXXXXXXXXXXXX ((no bank > name)/ACCOUNT) > 11:24:17 Operation finished, you can now close this window. > > Jon > > On Mon, 2020-05-25 at 09:09 -0700, John Ralls wrote: > > Jon, > > The Application Settings I use for USAA are > Application ID: QWIN > Application Version: 2200 > Header Version: 102 > > In Special Settings: > HTTP Version, Client UID, and Security Type are blank, Force SSLv3 > and Send Short Date are checked, and Send Empty Bank ID and Send > Empty FID are unchecked. > > Another user had trouble with USAA because he had entered a Client > UID on the User Settings page, so make sure that's blank too. > > Yes, SSL v3 is less secure than TLS, but it's better than sending the > data in the clear, and yes, the authentication that USAA uses on OFX > DirectConnect is less than ideal. > > Regards, > John Ralls > > > On May 25, 2020, at 8:59 AM, Jon Schewe <jpsch...@mtu.net> wrote: > > Alan, > > Thanks for the suggestion. I tried not setting any special settings > and > make sure the SSL v3 is unchecked. Still no change. > > As far as security goes, this method for getting my transactions > appears less secure than using Web Connect. When I login to get to > the > Web Connect download I need to enter a one time password from my > phone, > but for Direct Connect I only need my PIN. > > Jon > > On Mon, 2020-05-25 at 11:48 -0400, Alan wrote: > Jon, > > Disable SSL v3. Info at wiki.gnucash.org is wrong. It's not secure, > and no > reputable financial institution should be supporting it for financial > transactions. > > As of this moment, USAA is only supporting TLS 1.2 and 1.3, which are > secure. > Suggest not setting any of the "special settings" options, and never > enable SSL > v2 or v3 for any program, except for testing with non-sensitive data. > > -----Original Message----- > From: gnucash-user > [mailto:gnucash-user-bounces+alangnuc=bigtowers....@gnucash.org] On > Behalf Of > Jon Schewe > Sent: Monday, May 25, 2020 10:36 AM > To: gnucash-user <gnucash-user@gnucash.org> > Subject: [GNC] Using Quicken direct connect with USAA > > I have been using the Web Connect with USAA for years and that's > worked great. > However now I see that they are discontinuing support for this > feature. So I'm > trying to setup Direct Connect. I found the instructions for setting > up USAA at > https://wiki.gnucash.org/wiki/OFX_Direct_Connect_Bank_Settings#USAA, > however I'm not seeing the "Server Capabilities" tab to select the > account list > download options. > > I'm using GnuCash 3.10 from flatpak. > I'm on Linux. > > I have the following Settings: > "User Settings" > User Name, User id and Client UID all set to my USAA number. I have > tried both > with the 00 prefix and without. > > "Bank Settings" > Broker ID: 5874 > FID: 24591 > ORG: USAA > Server URL: https://service2.usaa.com/ofx/OFXServlet > > "Application Settings" > I've tried the default application settings and the settings that > should be for > Quicken 2017: > Application ID: QWIN > Application Version: 2600 > Header Version: 102 > > Under "Special Settings" I've tried HTTP Version blank, 1.0 and 1.1. > I've checked "Force SSLv3". > > When I go back to the "Bank Settings" tab I see the following after > clicking on > "Retrieve Account List". > > 09:26:37 Sending request... > 09:26:37 Using GnuTLS default ciphers. > 09:26:37 TLS: SSL-Ciphers negotiated: TLS1.3:ECDHE-RSA-AES-256- > GCM:AEAD > 09:26:37 Waiting for response... > 09:26:37 Operation finished, you can now close this window. > > The AqBanking Setup never lets me get to the point of associating > USAA accounts > with GnuCash accounts. Can someone give me some pointers on what is > wrong here? > > Thank you, > Jon > > > > _______________________________________________ > gnucash-user mailing list > gnucash-user@gnucash.org > To update your subscription preferences or to unsubscribe: > https://lists.gnucash.org/mailman/listinfo/gnucash-user > If you are using Nabble or Gmane, please see > https://wiki.gnucash.org/wiki/Mailing_Lists for more information. > ----- > Please remember to CC this list on all your replies. > You can do this by using Reply-To-List or Reply-All. > > > > > > > _______________________________________________ > gnucash-user mailing list > gnucash-user@gnucash.org > To update your subscription preferences or to unsubscribe: > https://lists.gnucash.org/mailman/listinfo/gnucash-user > If you are using Nabble or Gmane, please see > https://wiki.gnucash.org/wiki/Mailing_Lists for more information. > ----- > Please remember to CC this list on all your replies. > You can do this by using Reply-To-List or Reply-All. > > _______________________________________________ gnucash-user mailing list gnucash-user@gnucash.org To update your subscription preferences or to unsubscribe: https://lists.gnucash.org/mailman/listinfo/gnucash-user If you are using Nabble or Gmane, please see https://wiki.gnucash.org/wiki/Mailing_Lists for more information. ----- Please remember to CC this list on all your replies. You can do this by using Reply-To-List or Reply-All.