[stunnel-users] Loss of ability to use Stunnel-Blat, and a solution

[Peter Pentchev]

On Tue, Jul 10, 2018 at 09:15:39AM +0200, Flo Rance wrote:
> Hi,
> 
> Click on your avatar, then Google Account, then Sign-In & Security. At the
> bottom of the page, there's "Allow less secure apps".
> 
> You can't choose which app is a less secure app, because this option may be
> understood as "re-enabling Basic Authentication" which means "plain-text
> password authentication".
> 
> By default, Gmail only allows Oauth authentication.

<off-topic rant... SCNR>

Yeah, well, wouldn't it be nice if only we had a system that would allow
us to grant (possibly limited) access to specific applications by, say,
issuing them a little authentication something that they could present
to the authorities... we might even call it a "ticket"... but of course,
not everything with access should be able to issue tickets, so we may
have a ticket-granting ticket and a normal access ticket...

...yeah, wouldn't it be nice...

</rant>

Sometimes I do feel like an old-timer...

G'luck,
Peter

> Regards,
> Flo
> 
> On Mon, Jul 9, 2018 at 7:55 PM, Roger Bohl <rhbohl at gmail.com> wrote:
> 
> > Early in 2018, around the time when I upgraded my system to Windows 10,
> > the Stunnel and Blat files that had worked fine with my Vista PC would not
> > work with the new PC.  However, the "bug" turned out to be unrelated to the
> > change in operating systems, but rather an "upgrade" to Gmail:
> > Coincidentally, about that time, Gmail evidently decided to stop accepting
> > e-mails from apps deemed "a less secure app", including Stunnel-Blat, with
> > Blat then displaying messages:
> >
> > *** Warning ***  The SMTP server did not accept Auth PLAIN value.
> > *** Warning ***  Are your login userid and password correct?
> > *** Warning ***  The SMTP server did not accept Auth LOGIN PASSWD value.
> >
> > Only a failure message sent to my "backup e-mail address" led me to
> > explore this as a possible cause for what I had thought was, but turned out
> > not to be, a Stunnel-Blat problem.  Gmail has an option to suppress this
> > heightened security feature, and when I activated this option, my
> > Stunnel-Blat tools immediately began to function as intended.
> >
> >
> > While I was at first able to enable Gmail to "Allow access from "less
> > secure accounts," I have been unable to get through Gmail options
> > consistently to turn this on and off and share this info with others.  (I
> > would welcome instructions that work consistently.)
> >
> > I would also welcome guidance on how to include Stunnel-Blat as a specific
> > alllowed app, without having to enable Gmail to enable *all* "less secure
> > apps"
> >
> > Roger Bohl

-- 
Peter Pentchev  roam@{ringlet.net,debian.org,FreeBSD.org} pp at storpool.com
PGP key:        http://people.FreeBSD.org/~roam/roam.key.asc
Key fingerprint 2EE7 A7A5 17FC 124C F115  C354 651E EFB0 2527 DF13
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://www.stunnel.org/pipermail/stunnel-users/attachments/20180710/17b69519/attachment.sig>