Re: Odg: Logging in to O365 account

[Bence Ferdinandy]

I've personally started using mailctl for oauth as I find it more elegant then
the mutt script: https://git.sr.ht/~petrus/mailctl

this is my working config: 
https://github.com/ferdinandyb/dotfiles/tree/master/.config/mailctl

this discussion might be needed:
https://lists.sr.ht/~petrus/mailctl-discuss/%3C87fs92pvvg.fsf%40icmfp.com%3E

It's using TB's credentials. One caveat is that I've seen people having
problems if their organisation has an SSO instead of using the MS login screen.


___
isync-devel mailing list
isync-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/isync-devel

Re: Odg: Logging in to O365 account

[Marton Balazs]

My (limited) understanding is that it is not required.

Best,
Marton

On Fri, 9 Jun 2023, 01:49 H,  wrote:

> On June 8, 2023 7:26:29 PM EDT, Marton Balazs  wrote:
> >I confirm that the tenant id I received agrees with the one given by
> >the page you mentioned https://www.whatismytenantid.com/ .
> >
> >We also got a client secret but I just tried in my config.json (I'm
> >using oauth2ms):
> >
> >{
> >  "tenant_id": "XXX",
> >  "client_id": "XXX",
> >  "client_secret": "XXX",
> >  "redirect_host": "localhost",
> >  "redirect_port": "5000",
> >  "redirect_path": "/getToken/",
> >"scopes": ["https://outlook.office.com/IMAP.AccessAsUser.All";, "
> >https://outlook.office.com/SMTP.Send";]
> >}
> >
> >and replacing the client_secret line with the empty value:
> >  "client_secret": "",
> >
> >works equally well. So it may only be the client_id that you're
> >missing.
> >
> >Thunderbird (sorry, it's a bit OFF here) does it all automatically, I
> >enter my email address and O365 password, check that I want to use
> >IMAP, then it complains that configuration could not be verified so in
> >manual config I set
> >
> >Incoming protocol: IMAP
> >Hostname: outlook.office365.com
> >Port 993
> >Connection security SSL/TLS
> >Auth method: Autodetect
> >Username 
> >
> >Outgoing sevrer:
> >Hostname: smtp.office365.com
> >Port: 587
> >Connection security: STARTTLS
> >Auth method: Autodetect
> >Username 
> >
> >and it connects just fine.
> >
> >I suspect things also depend on how your workplace admin sets things
> >up.
> >
> >Best wishes,
> >Marton
> >
> >On Thu, Jun 08, 2023 at 06:14:54PM -0400, H wrote:
> >> On 06/08/2023 05:42 PM, Marton Balazs wrote:
> >> > I could only get things to work when my workplace finally provided
> >tenant_id and client_id. (Of course this doesn't mean it's impossible
> >with Thunderbird's, but I couldn't succeed with those.)
> >> >
> >> > Best wishes,
> >> > Marton
> >> >
> >> > On Thu, Jun 08, 2023 at 04:23:50PM -0400, H wrote:
> >>
> >> The O365 Tenant ID is public information, see the website I mentioned
> >in my email. So you received an AppID from your administrator, did you
> >also receive the ClientSecret to go with it?
> >>
> >> Can you now log onto and use your O365 mail account with Thunderbird?
> >>
>
> So it looks like client_secret is not a required item of information?
>
___
isync-devel mailing list
isync-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/isync-devel

Re: Odg: Logging in to O365 account

[H]

On June 8, 2023 7:26:29 PM EDT, Marton Balazs  wrote:
>I confirm that the tenant id I received agrees with the one given by
>the page you mentioned https://www.whatismytenantid.com/ .
>
>We also got a client secret but I just tried in my config.json (I'm
>using oauth2ms):
>
>{
>  "tenant_id": "XXX",
>  "client_id": "XXX",
>  "client_secret": "XXX",
>  "redirect_host": "localhost",
>  "redirect_port": "5000",
>  "redirect_path": "/getToken/",
>"scopes": ["https://outlook.office.com/IMAP.AccessAsUser.All";, "
>https://outlook.office.com/SMTP.Send";]
>}
>
>and replacing the client_secret line with the empty value:
>  "client_secret": "",
>
>works equally well. So it may only be the client_id that you're
>missing.
>
>Thunderbird (sorry, it's a bit OFF here) does it all automatically, I
>enter my email address and O365 password, check that I want to use
>IMAP, then it complains that configuration could not be verified so in
>manual config I set
>
>Incoming protocol: IMAP
>Hostname: outlook.office365.com
>Port 993
>Connection security SSL/TLS
>Auth method: Autodetect
>Username 
>
>Outgoing sevrer:
>Hostname: smtp.office365.com
>Port: 587
>Connection security: STARTTLS
>Auth method: Autodetect
>Username 
>
>and it connects just fine.
>
>I suspect things also depend on how your workplace admin sets things
>up.
>
>Best wishes,
>Marton
>
>On Thu, Jun 08, 2023 at 06:14:54PM -0400, H wrote:
>> On 06/08/2023 05:42 PM, Marton Balazs wrote:
>> > I could only get things to work when my workplace finally provided
>tenant_id and client_id. (Of course this doesn't mean it's impossible
>with Thunderbird's, but I couldn't succeed with those.)
>> >
>> > Best wishes,
>> > Marton
>> >
>> > On Thu, Jun 08, 2023 at 04:23:50PM -0400, H wrote:
>>
>> The O365 Tenant ID is public information, see the website I mentioned
>in my email. So you received an AppID from your administrator, did you
>also receive the ClientSecret to go with it?
>> 
>> Can you now log onto and use your O365 mail account with Thunderbird?
>> 

So it looks like client_secret is not a required item of information?


___
isync-devel mailing list
isync-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/isync-devel

Re: Odg: Logging in to O365 account

[Marton Balazs]

I confirm that the tenant id I received agrees with the one given by the page 
you mentioned https://www.whatismytenantid.com/ .

We also got a client secret but I just tried in my config.json (I'm using 
oauth2ms):

{
  "tenant_id": "XXX",
  "client_id": "XXX",
  "client_secret": "XXX",
  "redirect_host": "localhost",
  "redirect_port": "5000",
  "redirect_path": "/getToken/",
  "scopes": ["https://outlook.office.com/IMAP.AccessAsUser.All";, " 
https://outlook.office.com/SMTP.Send";]
}

and replacing the client_secret line with the empty value:
  "client_secret": "",

works equally well. So it may only be the client_id that you're missing.

Thunderbird (sorry, it's a bit OFF here) does it all automatically, I enter my 
email address and O365 password, check that I want to use IMAP, then it 
complains that configuration could not be verified so in manual config I set

Incoming protocol: IMAP
Hostname: outlook.office365.com
Port 993
Connection security SSL/TLS
Auth method: Autodetect
Username 

Outgoing sevrer:
Hostname: smtp.office365.com
Port: 587
Connection security: STARTTLS
Auth method: Autodetect
Username 

and it connects just fine.

I suspect things also depend on how your workplace admin sets things up.

Best wishes,
Marton

On Thu, Jun 08, 2023 at 06:14:54PM -0400, H wrote:
> On 06/08/2023 05:42 PM, Marton Balazs wrote:
> > I could only get things to work when my workplace finally provided 
> > tenant_id and client_id. (Of course this doesn't mean it's impossible with 
> > Thunderbird's, but I couldn't succeed with those.)
> >
> > Best wishes,
> > Marton
> >
> > On Thu, Jun 08, 2023 at 04:23:50PM -0400, H wrote:
>
> The O365 Tenant ID is public information, see the website I mentioned in my 
> email. So you received an AppID from your administrator, did you also receive 
> the ClientSecret to go with it?
> 
> Can you now log onto and use your O365 mail account with Thunderbird?
> 


___
isync-devel mailing list
isync-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/isync-devel

Re: Odg: Logging in to O365 account

[H]

On 06/08/2023 05:42 PM, Marton Balazs wrote:
> I could only get things to work when my workplace finally provided tenant_id 
> and client_id. (Of course this doesn't mean it's impossible with 
> Thunderbird's, but I couldn't succeed with those.)
>
> Best wishes,
> Marton
>
> On Thu, Jun 08, 2023 at 04:23:50PM -0400, H wrote:
>> On 12/31/2022 08:40 PM, H wrote:
>>
>> On 12/28/2022 01:49 PM, Mario Župan wrote:
>>
>> Negative.
>>
>> I also had a need to download all my mails from office365 domain with
>> zero help of an admin. We moved to another office365 domain which I
>> wanted to read with aerc.
>>
>> So, I will try just to give you an overview:
>>
>> #1 GPG
>>
>> gpg --full-generate-key
>>
>> gpg --sign-key "mzupan mzu...@vup.hr"
>>
>> gpg --output ./Documents/manual/email-terminal/vup-token --armor
>> --export "mzupan >
>>
>> #2 use mutt_ouath2.py script
>>
>> python ./Documents/manual/email-terminal/mutt_oauth2.py
>> ./Documents/manual/email-terminal/vup-token --verbose --authorize
>>
>> #3 in mutt_ouath2.py you need just to change the next row:
>>
>> ENCRYPTION_PIPE = ['gpg', '--encrypt', '--recipient', 'mario <
>> mzu...@vup.hr>'
>>
>>
>>
>> # then in .mbsyncrc you need todo this:
>>
>>
>> 
>> ...
>>
>> IMAPAccount vup
>> Host outlook.office365.com
>> User mzu...@vup.hr
>> AuthMechs XOAUTH2
>> PassCmd "python ~/Documents/manual/email-terminal/mutt_oauth2.py ~/
>> Documents/manual/email-terminal/vup-token"
>> CertificateFile /etc/ssl/certs/ca-certificates.crt
>> TLSType IMAPS
>>
>> ...
>>
>> 
>>
>> Other lines are the same for every account. I hope I make the process
>> understandable.
>>
>> Best,
>>
>> Mario Zupan
>> 
>> ━━━
>> Šalje: H 
>> Poslano: 26. prosinca 2022. 16:52
>> Kopija: Isync Mailing List 
>> Predmet: Re: Logging in to O365 account
>>  
>> On December 26, 2022 2:39:56 AM EST, Bence Ferdinandy
>>  wrote:
>> >2022. dec. 26. 3:08:32 H :
>> >
>> >> The TENANT_ID is available on the portal.azure.com page when 
>> logged
>> >in,
>> >> registering an app to get the CLIENT_ID is locked down. I don't 
>> see
>> >any
>> >> upside for the organization to provide a CLIENT_ID, only a 
>> potential
>> >> security risk, so I do not see that happening.
>> >
>> >For the client id, I suggest you use this:
>> >https://github.com/ferdinandyb/dotfiles/blob/master/.config/
>> emailconfiguration/mutt_oauth2.py#L77
>> >
>> >you will find that it's a rather well known application and thus 
>> will
>> >likely be already authorized.
>> >
>> >Besr,
>> >Bence
>>
>> Thank you. Does this require someone has already gotten mutt 
>> registered
>> as an application on my organization's O365 site?
>>
>>
>> ___
>> isync-devel mailing list
>> isync-devel@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/isync-devel
>>
>> Two more questions:
>>
>> -    Where do I get the ca-certificates.crt file you are referring to?
>>
>> -    You list TLSType IMAPS but mbsync does not recognize that keyword. 
>> Do
>> you mean SSLType IMAPS?
>>
>>
>>
>>
>>
>> ___
>> isync-devel mailing list
>> isync-devel@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/isync-devel
>>
>> I am returning to this again but have run into problems.
>>
>>
>> First, I'd like to make sure I know exactly what information is needed to get
>> this to work with my university's O365 account.
>>
>> - Tenant ID. This is tied to the customer and I found mine using https://
>> www.whatismytenantid.com/
>>
>> - App ID. Based on previous posts I have seen, it's been suggested to use the
>> same one as Thunderbird uses since it is often allowed access. I found its 
>> App
>> ID at https://blog.thunderbird.net/2023/01/
>> important-message-for-microsoft-office-365-enterprise-users/ where it states 
>> it
>> uses "9e5f94bc-e8a4-4e73-b8be-63364c29d753". By the way, visiting
>> portal.azure.com I found a link to register an app but it is disallowed by my
>> university's IT-department, hence I need to use Thunderbird hoping access by
>> Thunderbird is indeed allowed.
>>
>> - Client Secret. I understand this is also tied to the app, ie Thunderbird? 
>> Not
>> sure what to use but an older posting for Thunderbird listed 
>> "TxRBilcHdC6WGBee]
>> fs?QR:SJ8nI[g82" but that was together with another Thunderbird App ID, ie.
>>

Re: Odg: Logging in to O365 account

[Marton Balazs]

I could only get things to work when my workplace finally provided tenant_id 
and client_id. (Of course this doesn't mean it's impossible with Thunderbird's, 
but I couldn't succeed with those.)

Best wishes,
Marton

On Thu, Jun 08, 2023 at 04:23:50PM -0400, H wrote:
> On 12/31/2022 08:40 PM, H wrote:
> 
> On 12/28/2022 01:49 PM, Mario Župan wrote:
> 
> Negative.
> 
> I also had a need to download all my mails from office365 domain with
> zero help of an admin. We moved to another office365 domain which I
> wanted to read with aerc.
> 
> So, I will try just to give you an overview:
> 
> #1 GPG
> 
> gpg --full-generate-key
> 
> gpg --sign-key "mzupan mzu...@vup.hr"
> 
> gpg --output ./Documents/manual/email-terminal/vup-token --armor
> --export "mzupan  
> 
> #2 use mutt_ouath2.py script
> 
> python ./Documents/manual/email-terminal/mutt_oauth2.py
> ./Documents/manual/email-terminal/vup-token --verbose --authorize
> 
> #3 in mutt_ouath2.py you need just to change the next row:
> 
> ENCRYPTION_PIPE = ['gpg', '--encrypt', '--recipient', 'mario <
> mzu...@vup.hr>'
> 
> 
> 
> # then in .mbsyncrc you need todo this:
> 
> 
> 
> ...
> 
> IMAPAccount vup
> Host outlook.office365.com
> User mzu...@vup.hr
> AuthMechs XOAUTH2
> PassCmd "python ~/Documents/manual/email-terminal/mutt_oauth2.py ~/
> Documents/manual/email-terminal/vup-token"
> CertificateFile /etc/ssl/certs/ca-certificates.crt
> TLSType IMAPS
> 
> ...
> 
> 
> 
> Other lines are the same for every account. I hope I make the process
> understandable.
> 
> Best,
> 
> Mario Zupan
> 
> ━━━
> Šalje: H 
> Poslano: 26. prosinca 2022. 16:52
> Kopija: Isync Mailing List 
> Predmet: Re: Logging in to O365 account
>  
> On December 26, 2022 2:39:56 AM EST, Bence Ferdinandy
>  wrote:
> >2022. dec. 26. 3:08:32 H :
> >
> >> The TENANT_ID is available on the portal.azure.com page when logged
> >in,
> >> registering an app to get the CLIENT_ID is locked down. I don't see
> >any
> >> upside for the organization to provide a CLIENT_ID, only a 
> potential
> >> security risk, so I do not see that happening.
> >
> >For the client id, I suggest you use this:
> >https://github.com/ferdinandyb/dotfiles/blob/master/.config/
> emailconfiguration/mutt_oauth2.py#L77
> >
> >you will find that it's a rather well known application and thus will
> >likely be already authorized.
> >
> >Besr,
> >Bence
> 
> Thank you. Does this require someone has already gotten mutt 
> registered
> as an application on my organization's O365 site?
> 
> 
> ___
> isync-devel mailing list
> isync-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/isync-devel
>
> Two more questions:
> 
> -    Where do I get the ca-certificates.crt file you are referring to?
> 
> -    You list TLSType IMAPS but mbsync does not recognize that keyword. Do
> you mean SSLType IMAPS?
> 
> 
>
> 
>
> ___
> isync-devel mailing list
> isync-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/isync-devel
> 
> I am returning to this again but have run into problems.
> 
> 
> First, I'd like to make sure I know exactly what information is needed to get
> this to work with my university's O365 account.
> 
> - Tenant ID. This is tied to the customer and I found mine using https://
> www.whatismytenantid.com/
> 
> - App ID. Based on previous posts I have seen, it's been suggested to use the
> same one as Thunderbird uses since it is often allowed access. I found its App
> ID at https://blog.thunderbird.net/2023/01/
> important-message-for-microsoft-office-365-enterprise-users/ where it states 
> it
> uses "9e5f94bc-e8a4-4e73-b8be-63364c29d753". By the way, visiting
> portal.azure.com I found a link to register an app but it is disallowed by my
> university's IT-department, hence I need to use Thunderbird hoping access by
> Thunderbird is indeed allowed.
> 
> - Client Secret. I understand this is also tied to the app, ie Thunderbird? 
> Not
> sure what to use but an older posting for Thunderbird listed 
> "TxRBilcHdC6WGBee]
> fs?QR:SJ8nI[g82" but that was together with another Thunderbird App ID, ie.
> "08162f7c-0fd2-4200-a84a-f25a4db0b584". I would think that with the more 
> recent
> App ID I mention above I should use a matching ClientSecret but have yet to
> find it. Suggest

Re: Odg: Logging in to O365 account

[H]

On 12/31/2022 08:40 PM, H wrote:
> On 12/28/2022 01:49 PM, Mario Župan wrote:
>> Negative.
>>
>> I also had a need to download all my mails from office365 domain with
>> zero help of an admin. We moved to another office365 domain which I
>> wanted to read with aerc.
>>
>> So, I will try just to give you an overview:
>>
>> #1 GPG
>>
>> gpg --full-generate-key
>>
>> gpg --sign-key "mzupan mzu...@vup.hr "
>>
>> gpg --output ./Documents/manual/email-terminal/vup-token --armor --export 
>> "mzupan mailto:mzu...@vup.hr>"
>>
>>
>> #2 use mutt_ouath2.py script
>>
>> python ./Documents/manual/email-terminal/mutt_oauth2.py
>> ./Documents/manual/email-terminal/vup-token --verbose --authorize
>>
>> #3 in mutt_ouath2.py you need just to change the next row:
>>
>> ENCRYPTION_PIPE = ['gpg', '--encrypt', '--recipient', 'mario > >'
>>
>>
>>
>> # then in .mbsyncrc you need todo this:
>>
>>
>> 
>> ...
>>
>> IMAPAccount vup
>> Host outlook.office365.com 
>> User mzu...@vup.hr 
>> AuthMechs XOAUTH2
>> PassCmd "python ~/Documents/manual/email-terminal/mutt_oauth2.py 
>> ~/Documents/manual/email-terminal/vup-token"
>> CertificateFile /etc/ssl/certs/ca-certificates.crt
>> TLSType IMAPS
>>
>> ...
>>
>> 
>>
>> Other lines are the same for every account. I hope I make the process
>> understandable.
>>
>> Best,
>>
>> Mario Zupan
>> --
>> *Šalje:* H 
>> *Poslano:* 26. prosinca 2022. 16:52
>> *Kopija:* Isync Mailing List 
>> *Predmet:* Re: Logging in to O365 account
>>  
>> On December 26, 2022 2:39:56 AM EST, Bence Ferdinandy  
>> wrote:
>> >2022. dec. 26. 3:08:32 H :
>> >
>> >> The TENANT_ID is available on the portal.azure.com page when logged
>> >in,
>> >> registering an app to get the CLIENT_ID is locked down. I don't see
>> >any
>> >> upside for the organization to provide a CLIENT_ID, only a potential
>> >> security risk, so I do not see that happening.
>> >
>> >For the client id, I suggest you use this:
>> >https://github.com/ferdinandyb/dotfiles/blob/master/.config/emailconfiguration/mutt_oauth2.py#L77
>> >
>> >you will find that it's a rather well known application and thus will
>> >likely be already authorized.
>> >
>> >Besr,
>> >Bence
>>
>> Thank you. Does this require someone has already gotten mutt registered as 
>> an application on my organization's O365 site?
>>
>>
>> ___
>> isync-devel mailing list
>> isync-devel@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/isync-devel
>
> Two more questions:
>
> -    Where do I get the ca-certificates.crt file you are referring to?
>
> -    You list TLSType IMAPS but mbsync does not recognize that keyword. Do 
> you mean SSLType IMAPS?
>
>
>
>
>
> ___
> isync-devel mailing list
> isync-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/isync-devel

I am returning to this again but have run into problems.


First, I'd like to make sure I know exactly what information is needed to get 
this to work with my university's O365 account.

- Tenant ID. This is tied to the customer and I found mine using 
https://www.whatismytenantid.com/

- App ID. Based on previous posts I have seen, it's been suggested to use the 
same one as Thunderbird uses since it is often allowed access. I found its App 
ID at 
https://blog.thunderbird.net/2023/01/important-message-for-microsoft-office-365-enterprise-users/
 where it states it uses "9e5f94bc-e8a4-4e73-b8be-63364c29d753". By the way, 
visiting portal.azure.com I found a link to register an app but it is 
disallowed by my university's IT-department, hence I need to use Thunderbird 
hoping access by Thunderbird is indeed allowed.

- Client Secret. I understand this is also tied to the app, ie Thunderbird? Not 
sure what to use but an older posting for Thunderbird listed 
"TxRBilcHdC6WGBee]fs?QR:SJ8nI[g82" but that was together with another 
Thunder

Re: Odg: Logging in to O365 account

[Oswald Buddenhagen]

On Sun, Jan 01, 2023 at 01:14:25PM -0500, H wrote:
nor does AuthMechs support XOAUTH2, only EXTERNAL LOGIN PLAIN 
ANONYMOUS.



then you presumably didn't install the xoauth2 sasl plugin (correctly).



___
isync-devel mailing list
isync-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/isync-devel

Re: Odg: Logging in to O365 account

[Bence Ferdinandy]

> I am running CentOS 7 and found that the cert file is called ca-bundle.crt 
> rather than ca-certificates.crt.
>
> However, the current version is isync 1.3.6 which not seem to support 
> TLSType, nor does AuthMechs support XOAUTH2, only EXTERNAL LOGIN PLAIN 
> ANONYMOUS.
>
> Is there any way around this?

Installing the latest isync version ;) Building from source is probably the 
easiest way.

Best,
Bence

--
+36305425054
bence.ferdinandy.com


signature.asc
Description: PGP signature
___
isync-devel mailing list
isync-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/isync-devel

Re: Odg: Logging in to O365 account

[H]

On 01/01/2023 04:30 AM, Bence Ferdinandy wrote:
> On Sun Jan 01, 2023 at 02:40, H wrote:
>> Two more questions:
>>
>> -    Where do I get the ca-certificates.crt file you are referring to?
> that should be installed by your OS, `sudo apt-get install ca-certificates` 
> for
> Ubuntu/Debian
>
>> -    You list TLSType IMAPS but mbsync does not recognize that keyword. Do 
>> you mean SSLType IMAPS?
> I also have TLSType IMAPS, maybe you are running an older version of mbsync?
>
> ❯ mbsync --version
> isync 1.5.0
>
> Best,
> Bence
>
> --
> +36305425054
> bence.ferdinandy.com

I am running CentOS 7 and found that the cert file is called ca-bundle.crt 
rather than ca-certificates.crt.

However, the current version is isync 1.3.6 which not seem to support TLSType, 
nor does AuthMechs support XOAUTH2, only EXTERNAL LOGIN PLAIN ANONYMOUS.

Is there any way around this?



___
isync-devel mailing list
isync-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/isync-devel

Re: Odg: Logging in to O365 account

[Bence Ferdinandy]

On Sun Jan 01, 2023 at 02:40, H wrote:
>
> Two more questions:
>
> -    Where do I get the ca-certificates.crt file you are referring to?

that should be installed by your OS, `sudo apt-get install ca-certificates` for
Ubuntu/Debian

>
> -    You list TLSType IMAPS but mbsync does not recognize that keyword. Do 
> you mean SSLType IMAPS?
I also have TLSType IMAPS, maybe you are running an older version of mbsync?

❯ mbsync --version
isync 1.5.0

Best,
Bence

--
+36305425054
bence.ferdinandy.com


signature.asc
Description: PGP signature
___
isync-devel mailing list
isync-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/isync-devel

Re: Odg: Logging in to O365 account

[H]

On 12/28/2022 01:49 PM, Mario Župan wrote:
> Negative.
>
> I also had a need to download all my mails from office365 domain with
> zero help of an admin. We moved to another office365 domain which I
> wanted to read with aerc.
>
> So, I will try just to give you an overview:
>
> #1 GPG
>
> gpg --full-generate-key
>
> gpg --sign-key "mzupan mzu...@vup.hr "
>
> gpg --output ./Documents/manual/email-terminal/vup-token --armor --export 
> "mzupan mailto:mzu...@vup.hr>"
>
>
> #2 use mutt_ouath2.py script
>
> python ./Documents/manual/email-terminal/mutt_oauth2.py
> ./Documents/manual/email-terminal/vup-token --verbose --authorize
>
> #3 in mutt_ouath2.py you need just to change the next row:
>
> ENCRYPTION_PIPE = ['gpg', '--encrypt', '--recipient', 'mario  >'
>
>
>
> # then in .mbsyncrc you need todo this:
>
>
> 
> ...
>
> IMAPAccount vup
> Host outlook.office365.com 
> User mzu...@vup.hr 
> AuthMechs XOAUTH2
> PassCmd "python ~/Documents/manual/email-terminal/mutt_oauth2.py 
> ~/Documents/manual/email-terminal/vup-token"
> CertificateFile /etc/ssl/certs/ca-certificates.crt
> TLSType IMAPS
>
> ...
>
> 
>
> Other lines are the same for every account. I hope I make the process
> understandable.
>
> Best,
>
> Mario Zupan
> --
> *Šalje:* H 
> *Poslano:* 26. prosinca 2022. 16:52
> *Kopija:* Isync Mailing List 
> *Predmet:* Re: Logging in to O365 account
>  
> On December 26, 2022 2:39:56 AM EST, Bence Ferdinandy  
> wrote:
> >2022. dec. 26. 3:08:32 H :
> >
> >> The TENANT_ID is available on the portal.azure.com page when logged
> >in,
> >> registering an app to get the CLIENT_ID is locked down. I don't see
> >any
> >> upside for the organization to provide a CLIENT_ID, only a potential
> >> security risk, so I do not see that happening.
> >
> >For the client id, I suggest you use this:
> >https://github.com/ferdinandyb/dotfiles/blob/master/.config/emailconfiguration/mutt_oauth2.py#L77
> >
> >you will find that it's a rather well known application and thus will
> >likely be already authorized.
> >
> >Besr,
> >Bence
>
> Thank you. Does this require someone has already gotten mutt registered as an 
> application on my organization's O365 site?
>
>
> ___
> isync-devel mailing list
> isync-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/isync-devel

Two more questions:

-    Where do I get the ca-certificates.crt file you are referring to?

-    You list TLSType IMAPS but mbsync does not recognize that keyword. Do you 
mean SSLType IMAPS?

___
isync-devel mailing list
isync-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/isync-devel

Re: Odg: Logging in to O365 account

[H]

On December 28, 2022 1:49:16 PM EST, "Mario Župan"  wrote:
>Negative.
>
>I also had a need to download all my mails from office365 domain with
>zero help of an admin. We moved to another office365 domain which I
>wanted to read with aerc.
>
>So, I will try just to give you an overview:
>
>#1 GPG
>
>gpg --full-generate-key
>
>gpg --sign-key "mzupan mzu...@vup.hr"
>
>gpg --output ./Documents/manual/email-terminal/vup-token --armor
>--export "mzupan mailto:mzu...@vup.hr>"
>
>
>#2 use mutt_ouath2.py script
>
>python ./Documents/manual/email-terminal/mutt_oauth2.py
>./Documents/manual/email-terminal/vup-token --verbose --authorize
>
>#3 in mutt_ouath2.py you need just to change the next row:
>
>ENCRYPTION_PIPE = ['gpg', '--encrypt', '--recipient', 'mario
>mailto:mzu...@vup.hr>>'
>
>
>
># then in .mbsyncrc you need todo this:
>
>
>
>...
>
>IMAPAccount vup
>Host outlook.office365.com
>User mzu...@vup.hr
>AuthMechs XOAUTH2
>PassCmd "python ~/Documents/manual/email-terminal/mutt_oauth2.py
>~/Documents/manual/email-terminal/vup-token"
>CertificateFile /etc/ssl/certs/ca-certificates.crt
>TLSType IMAPS
>
>...
>
>
>
>Other lines are the same for every account. I hope I make the process
>understandable.
>
>Best,
>
>Mario Zupan
>
>Šalje: H 
>Poslano: 26. prosinca 2022. 16:52
>Kopija: Isync Mailing List 
>Predmet: Re: Logging in to O365 account
>
>On December 26, 2022 2:39:56 AM EST, Bence Ferdinandy
> wrote:
>>2022. dec. 26. 3:08:32 H :
>>
>>> The TENANT_ID is available on the portal.azure.com page when logged
>>in,
>>> registering an app to get the CLIENT_ID is locked down. I don't see
>>any
>>> upside for the organization to provide a CLIENT_ID, only a potential
>>> security risk, so I do not see that happening.
>>
>>For the client id, I suggest you use this:
>>https://github.com/ferdinandyb/dotfiles/blob/master/.config/emailconfiguration/mutt_oauth2.py#L77
>>
>>you will find that it's a rather well known application and thus will
>>likely be already authorized.
>>
>>Besr,
>>Bence
>
>Thank you. Does this require someone has already gotten mutt registered
>as an application on my organization's O365 site?
>
>
>___
>isync-devel mailing list
>isync-devel@lists.sourceforge.net
>https://lists.sourceforge.net/lists/listinfo/isync-devel

Thank you, will try this! What is the reason for generating the gpg key? I have 
not seen this in other write-ups?


___
isync-devel mailing list
isync-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/isync-devel