Closed Bug 1766996 Opened 4 years ago Closed 4 years ago

Google OAuth preventing login to some accounts

Categories

(Thunderbird :: Security, defect)

Product:
Thunderbird
Component:
Security
Version:
Thunderbird 91
Type:
defect

Tracking

(Not tracked)

Status:
RESOLVED WORKSFORME

People

(Reporter: ynovetsky, Unassigned)

Details

Steps to reproduce:

  1. Have multiple (unlinked) Gmail accounts
  2. Update Thunderbird to latest version (91.8.1)
  3. Get mail from one account, login with oauth
  4. Attempt to get mail from both accounts

Actual results:

The account I logged in to with OAuth gets emails fine; the other account gives the following error:
The STAT command did not succeed. Error getting message number and sizes. Mail server pop.gmail.com responded: Invalid credentials.

Expected results:

Be able to login to both accounts and get mail from both

(In reply to Wayne Mery (:wsmwk) from comment #1)

reference:

I followed the instructions in the first article already. I checked the second article and it is not applicable to me.

To clarify, I have two gmail accounts (call them xxx@gmail.com and yyy@gmail.com). My account settings for both are identical. When I got the OAuth prompt, I provided the xxx@gmail.com address and password. I can get emails from xxx@gmail.com, but when trying to receive emails from yyy@gmail.com, the error I wrote above happens. I never got an additional OAuth prompt for the second (yyy) account.

Flags: needinfo?(ynovetsky)
Component: Untriaged → Security

I have 4 Gmail accounts configured in Thunderbird. All are oauth now. None cause issues. That is on Windows 10 with no third party antivirus or internet security suite. Like so many support topics, this makes no mention of that information. So I will make assumptions that you are using Windows 10 as that accounts for well over 95% of users.

My feeling is the oauth you are using is the same for both accounts, probably because you entered the same address for both when initially prompted.

Start by going to the account settings and checking in the server settings for the accounts that the correct username is specified there.
Click up to the account identity information (above server settings) and check the name of the outgoing server for the identity.
Then go to outgoing server (SMTP) and check that the google outgoing servers have the correct user name set for each account. SMTP servers can not be shared among Gmail accounts. One for each is essential.

Go to the saved passwords in preferences, in the list of passwords you should see a number of entries starting with oauth: (I have 8)
Using username as a key, delete the information stored for both of the accounts in question. Select the inbox of the first account and step through the oauth process when it connects to check the inbox. Then repeat for the inbox of the second account. Both should trigger an oauth flow.

(In reply to Matt from comment #3)

Then go to outgoing server (SMTP) and check that the google outgoing servers have the correct user name set for each account. SMTP servers can not be shared among Gmail accounts. One for each is essential.
...
Using username as a key, delete the information stored for both of the accounts in question. Select the inbox of the first account and step through the oauth process when it connects to check the inbox. Then repeat for the inbox of the second account. Both should trigger an oauth flow.

Thank you. This was indeed my issue. Once I fixed the SMTP settings to use different user names, and deleted my old OAuth password, it worked fine.

Status: UNCONFIRMED → RESOLVED
Closed: 4 years ago
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.