Open Bug 1919695 Opened 2 months ago Updated 19 days ago

Oauth2 authentication failures result in broken connections, failure to get mail, and SMTP to google and office365 time out in thunderbird 128.2.2

Categories

(Thunderbird :: Security, defect)

Product:
Thunderbird
Component:
Security
Version:
Thunderbird 128
Type:
defect

Tracking

(thunderbird_esr128+ affected)

Tracking Flags:
Tracking Status
thunderbird_esr128 + affected

People

(Reporter: chaplain, Unassigned, NeedInfo)

References

(Regression)

Details

(Keywords: regression, Whiteboard: [regression 128.2.1esr -> 128.2.2esr])

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115.0

Steps to reproduce:

1 - Install TB 128.2.1 or 128.2.2 from 128.2.0.
2 - Attempt to send 0auth2 authenticated SMTP email via Office365 or Gmail using existing config. Send times out.

IMPORTANT: correct operation restored by reversing install back to TB 128.2.0.

Actual results:

Attempt to send email times out.

Expected results:

email should send as it does in TB 128.2.0.

I reproduced the same problem.
It crashes when I try to quit Thunderbird due to no response.

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.0) Gecko/20100101 Thunderbird/128.2.2

If you go into the settings, and in the config editor look up any mail.smtpserver.<smtpXXX>.oauth2.scope prefs, what are their values? Please take note and paste them into this bug.

You can then try resetting them and restarting, which likely helps.

Keywords: regression
Whiteboard: [regression 128.2.1esr -> 128.2.2esr]
See Also: → 1919586
See Also: → 1919719

I already replaced my TB128.2.2esr with 128.2.1esr but I will paste it.

mail.smtpserver.smtp1.oauth2.scope:
https://outlook.office365.com/IMAP.AccessAsUser.All https://outlook.office365.com/POP.AccessAsUser.All https://outlook.office365.com/SMTP.Send offline_access

Duplicate of this bug: 1919766

Same issue here. Have reverted to 128.2.1esr. This works for Gmail. But now locked out of a 365 account – somehow back to the old admin approval problem.

See Also: → 1919720

The problem appears on all PCs in the company (approx. 50) that switch to version 128.2.2esr. I have to downgrade the version 128.2.1esr to work, and disable automatic update. The gmail and office365 accounts are the ones affected. After the downgrade, it works ok. I also installed version 129, it also works.

Looks like 128.2.2 is no longer being offered -- 'help | about' on a 128.2.1 install now shows 128.2.1 as being 'current'.

Seems reasonable, since a whole slew of people I know are having tyhe same problem (Win 10, Win 11, Home & Pro, Gnu/Linux - Fedora, Arch, Ubuntu). And yet, for a couple of my contacts, 128.2.2 seems to be working. But, for me, and a lot of my colleagues, failed, requiring reinstall of 128.2.1. Fortunately, thats a fairly trivial 'reversion', since profile formats are the same.

See Also: → 1919896
Duplicate of this bug: 1919896

(In reply to bugzilla from comment #5)

Same issue here. Have reverted to 128.2.1esr. This works for Gmail. But now locked out of a 365 account – somehow back to the old admin approval problem.

FYI: After downgrade to 128.2.1 I have no problems connecting to MS 365 (business account). To my knowledge 365 is very curios since last hack and they may require additional authentication, however in my case after downgrading TB 128.2.2 -> 128.2.1 everything worked seamlessly without requiring additional action.

Those of you who can reproduce this issue ...

The developer has a test build based on 128 code and would like feedback on whether it works or still fails. Linux, Mac and Windows:

You can install the test build and use your current Thunderbird data profile. In most cases you are likely using a profile named xxxxx.release-default. https://support.mozilla.org/en-US/kb/using-multiple-profiles for guidance on profiles. If the test build doesn't work, please get the logs which you will find in Error Console - ctrl+shift+J on linux and Windows, command+shift+J on Mac.

128.2.3 which has corrections will be available by automatic update on Sept 20. Until then you can install 128.2.1 from https://ftp.mozilla.org/pub/thunderbird/releases/128.2.1esr/win64/en-US/

128.2.2 had changes to accommodate changes at google. Unfortunately a ~month of beta testing apparently was not enough - updates to 128.2.2 are no longer being offered.

If it doesn't work, please get the logs which you will find in Error Console - ctrl+shift+J on linux and Windows, command+shift+J on Mac.

Wayne, thanks for your build.
I have tested it and it looks fine.
I can send and receive emails using Office365 and Gmail.

User Agent:
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.0) Gecko/20100101 Thunderbird/128.2.2

See Also: → 1919930

The test build is based on version 128 - I have corrected the instructions in comment 10.

See Also: 1919930 →

So, version 128.2.2esr only works if it is installed on a new PC, for the first time. If you upgrade from verse 128.2.1esr it does not work.
@Wayne : https://bugzilla.mozilla.org/show_bug.cgi?id=1919695#c10 solve issue, but here too the profile is made from 0, it is not installed over the old profile, so it is not a practical solution.

Let's mark this confirmed based on multiple bug reports.

Radu, you'd need to start with "thunderbird.exe -P" and select the original profile. New profiles don't have any issues as far as we know.

Status: UNCONFIRMED → NEW
Ever confirmed: true
Duplicate of this bug: 1920017
Duplicate of this bug: 1919586
Duplicate of this bug: 1919719
Duplicate of this bug: 1919720

(coming here from my 1920017)

the build above seems to work for me

thanks

Component: Untriaged → Security
Regressed by: 1909789, 1912556
See Also: 1919586, 1919719, 1919720, 1919896 → https://www.reddit.com/r/Thunderbird/comments/1fk070u/version_12822esr_released_september_18_2024/, https://support.mozilla.org/en-US/questions/1464322
Summary: Oauth2 SMTP to google and office365 time out in thunderbird 128.2.2 → Oauth2 authentication failures result in broken connections, failure to get mail, and SMTP to google and office365 time out in thunderbird 128.2.2
Duplicate of this bug: 1920042

The oauth2 patches causing this regression have been reverted in 128.2.3esr
https://www.thunderbird.net/en-US/thunderbird/128.2.3esr/releasenotes/

Duplicate of this bug: 1920139

(In reply to parazyt@seznam.cz from comment #20)

the build above seems to work for me

Did you test this with your existing profile, or did you start from nothing and set up the accounts again? This matters because we haven't found the cause of the problem yet, and I think it might be related to when the profile was first set up. There seems to be no problems with new profiles.

Flags: needinfo?(parazyt)

(In reply to Geoff Lankow (:darktrojan) from comment #24)

(In reply to parazyt@seznam.cz from comment #20)

the build above seems to work for me

Did you test this with your existing profile, or did you start from nothing and set up the accounts again? This matters because we haven't found the cause of the problem yet, and I think it might be related to when the profile was first set up. There seems to be no problems with new profiles.

good point. As I tried the 'Daily' install, it used a 'new' imap login, which worked.
(currently back to regular release 128.2.1esr/64 bit which works)

On second machine I installed the 128.2.3esr/64bit, which I just installed for testing: 1) Crashed upon first install 2) seems to work for O365

Flags: needinfo?(parazyt)

(In reply to parazyt@seznam.cz from comment #25)

(In reply to Geoff Lankow (:darktrojan) from comment #24)

(In reply to parazyt@seznam.cz from comment #20)

the build above seems to work for me

Did you test this with your existing profile, or did you start from nothing and set up the accounts again? This matters because we haven't found the cause of the problem yet, and I think it might be related to when the profile was first set up. There seems to be no problems with new profiles.

good point. As I tried the 'Daily' install, it used a 'new' imap login, which worked.
(currently back to regular release 128.2.1esr/64 bit which works)

On second machine I installed the 128.2.3esr/64bit, which I just installed for testing: 1) Crashed upon first install 2) seems to work for O365

correction, on second machine there is a 128.2.3esr/32bit

There are several people with issues in Support Forum.
eg: https://support.mozilla.org/en-US/questions/1451659?page=3#answer-1676403

One person posted:

From Config Editor:

mail.server.server1.oauth2.scope https://outlook.office.com/IMAP.AccessAsUser.All https://outlook.office.com/POP.AccessAsUser.All https://outlook.office.com/SMTP.Send offline_access

mail.smtpserver.smtp1.oauth2.scope https://outlook.office.com/IMAP.AccessAsUser.All https://outlook.office.com/POP.AccessAsUser.All https://outlook.office.com/SMTP.Send offline_access

  1. Deleted both entries.

  2. Removed saved passwords.

  3. Restarted Thunderbird.

  4. Comes up with https://account.live.com/App/Confirm web page asking if I'm trying to sign into Thunderbird, see below image.

  5. Pressed Continue and I'm able to download/view email.
    Note that since I already gave Thunderbird an authentication number when I first tried to set it up (from my 2FAS phone authenicator app), it doesn't ask for it again.

  6. Tried sending an email, but it comes up with same issue.

  7. Earlier I also tried smtp-mail.outlook.com for SMTP, but no joy.

Below is my live.com account account authenticator / verification page and it's showing Thunderbird's access. Wasn't sure if Two-step verification should be on or off.

Using config editor, the oauth2.scope now shows:
https://outlook.office.com/IMAP.AccessAsUser.All https://outlook.office.com/POP.AccessAsUser.All https://outlook.office.com/SMTP.Send offline_access

(In reply to Anje from comment #27)

There are several people with issues in Support Forum.
eg: https://support.mozilla.org/en-US/questions/1451659?page=3#answer-1676403

Anje, We should see if they still have issues on 128.2.3esr.

I have no issues so I'm including my what works prefs data for gmail imap oauth and calendar

Comparing prefs
In my version 115.15.0
I have gmail imap account and calendar using oauth and an old test for gmail address book.
I have no problems.
In config editor

Im going to 'update' - 115.15.0 to 128.2.3esr
Updated
Test send from gmail
No problems
Check scope data - same as above.

The oauth2scope is very simplified and different to version 131.0b5

In beta 131.0b5
I have gmail imap account and calendar using oauth
I have no problems.
Note: I orginally had imap gmail and deleted account then reinstated, I was testing another issue so I added and removed several times - so new one is server10, but I seem to still have the server1 prefs although all others were auto removed.
There is no server10 for smtp

The only difference is it mentions a change in the order
server 1 - account, then carddav then calendar
server 10 - account, then calendar, then carddav

I only seem to have the original server1 smtp
I have no issues with receiving nor sending or synch with calendar

(In reply to Corey Bryant from comment #28)

(In reply to Anje from comment #27)

There are several people with issues in Support Forum.
eg: https://support.mozilla.org/en-US/questions/1451659?page=3#answer-1676403

Anje, We should see if they still have issues on 128.2.3esr.

Some are still having issues:
https://support.mozilla.org/en-US/questions/1464666#answer-1675823
https://support.mozilla.org/en-US/questions/1451659?page=3#answer-1676580

I asked a user to help with Error Console data.
see : https://support.mozilla.org/en-US/questions/1464666?page=2#answer-1676735

They cleared error console, attempted to send, checked error console and this was the result:

mailnews.smtp: Command failed: 535 Authentication unsuccessful, SmtpClientAuthentication is disabled for the Tenant. Visit https://aka.ms/smtp_auth_disabled for more information. [BL1PR13CA0131.namprd13.prod.outlook.com 2024-09-25T16:17:00.055Z 08DCDC7DB9525546]; currentAction=_actionAUTH_XOAUTH2 SmtpClient.sys.mjs:602:19

_onCommand resource:///modules/SmtpClient.sys.mjs:602
_parse resource:///modules/SmtpClient.sys.mjs:404
_onData resource:///modules/SmtpClient.sys.mjs:461
_onOpen resource:///modules/SmtpClient.sys.mjs:433
(Async: EventHandlerNonNull)
connect resource:///modules/SmtpClient.sys.mjs:142
sendMailMessage resource:///modules/SmtpServer.sys.mjs:678
sendMailMessage resource:///modules/OutgoingServerService.sys.mjs:121
sendMailMessage resource:///modules/OutgoingServerService.sys.mjs:106
_deliverAsMail resource:///modules/MessageSend.sys.mjs:1138
_deliverMessage resource:///modules/MessageSend.sys.mjs:807
createAndSendMessage resource:///modules/MessageSend.sys.mjs:141
CompleteGenericSendMessage chrome://messenger/content/messengercompose/MsgComposeCommands.js:6443
GenericSendMessage chrome://messenger/content/messengercompose/MsgComposeCommands.js:6359
SendMessage chrome://messenger/content/messengercompose/MsgComposeCommands.js:6971
doCommand chrome://messenger/content/messengercompose/MsgComposeCommands.js:1083
doCommand chrome://messenger/content/messengercompose/MsgComposeCommands.js:1261
goDoCommand chrome://messenger/content/globalOverlay.js:99
oncommand chrome://messenger/content/messengercompose/messengercompose.xhtml:1

mailnews.smtp: Command failed: 500 Unrecognized command 'Length: 7' [BL1PR13CA0131.namprd13.prod.outlook.com 2024-09-25T16:17:05.101Z 08DCDC7DB9525546]; currentAction=_actionAUTHComplete SmtpClient.sys.mjs:602:19

_onCommand resource:///modules/SmtpClient.sys.mjs:602
_parse resource:///modules/SmtpClient.sys.mjs:404
_onData resource:///modules/SmtpClient.sys.mjs:461
_onOpen resource:///modules/SmtpClient.sys.mjs:433
(Async: EventHandlerNonNull)
connect resource:///modules/SmtpClient.sys.mjs:142
sendMailMessage resource:///modules/SmtpServer.sys.mjs:678
sendMailMessage resource:///modules/OutgoingServerService.sys.mjs:121
sendMailMessage resource:///modules/OutgoingServerService.sys.mjs:106
_deliverAsMail resource:///modules/MessageSend.sys.mjs:1138
_deliverMessage resource:///modules/MessageSend.sys.mjs:807
createAndSendMessage resource:///modules/MessageSend.sys.mjs:141
CompleteGenericSendMessage chrome://messenger/content/messengercompose/MsgComposeCommands.js:6443
GenericSendMessage chrome://messenger/content/messengercompose/MsgComposeCommands.js:6359
SendMessage chrome://messenger/content/messengercompose/MsgComposeCommands.js:6971
doCommand chrome://messenger/content/messengercompose/MsgComposeCommands.js:1083
doCommand chrome://messenger/content/messengercompose/MsgComposeCommands.js:1261
goDoCommand chrome://messenger/content/globalOverlay.js:99
oncommand chrome://messenger/content/messengercompose/messengercompose.xhtml:1

mailnews.smtp: Authentication failed: Unrecognized command 'Length: 7' [BL1PR13CA0131.namprd13.prod.outlook.com 2024-09-25T16:17:05.101Z 08DCDC7DB9525546] SmtpClient.sys.mjs:786:17

_onAuthFailed resource:///modules/SmtpClient.sys.mjs:786
_actionAUTHComplete resource:///modules/SmtpClient.sys.mjs:1187
_onCommand resource:///modules/SmtpClient.sys.mjs:607
_parse resource:///modules/SmtpClient.sys.mjs:404
_onData resource:///modules/SmtpClient.sys.mjs:461
_onOpen resource:///modules/SmtpClient.sys.mjs:433
(Async: EventHandlerNonNull)
connect resource:///modules/SmtpClient.sys.mjs:142
sendMailMessage resource:///modules/SmtpServer.sys.mjs:678
sendMailMessage resource:///modules/OutgoingServerService.sys.mjs:121
sendMailMessage resource:///modules/OutgoingServerService.sys.mjs:106
_deliverAsMail resource:///modules/MessageSend.sys.mjs:1138
_deliverMessage resource:///modules/MessageSend.sys.mjs:807
createAndSendMessage resource:///modules/MessageSend.sys.mjs:141
CompleteGenericSendMessage chrome://messenger/content/messengercompose/MsgComposeCommands.js:6443
GenericSendMessage chrome://messenger/content/messengercompose/MsgComposeCommands.js:6359
SendMessage chrome://messenger/content/messengercompose/MsgComposeCommands.js:6971
doCommand chrome://messenger/content/messengercompose/MsgComposeCommands.js:1083
doCommand chrome://messenger/content/messengercompose/MsgComposeCommands.js:1261
goDoCommand chrome://messenger/content/globalOverlay.js:99
oncommand chrome://messenger/content/messengercompose/messengercompose.xhtml:1

mailnews.smtp: Authentication failed: Unrecognized command 'Length: 7' [BL1PR13CA0131.namprd13.prod.outlook.com 2024-09-25T16:17:05.101Z 08DCDC7DB9525546] SmtpClient.sys.mjs:827:19

_onAuthFailed resource:///modules/SmtpClient.sys.mjs:827
_actionAUTHComplete resource:///modules/SmtpClient.sys.mjs:1187
_onCommand resource:///modules/SmtpClient.sys.mjs:607
_parse resource:///modules/SmtpClient.sys.mjs:404
_onData resource:///modules/SmtpClient.sys.mjs:461
_onOpen resource:///modules/SmtpClient.sys.mjs:433
(Async: EventHandlerNonNull)
connect resource:///modules/SmtpClient.sys.mjs:142
sendMailMessage resource:///modules/SmtpServer.sys.mjs:678
sendMailMessage resource:///modules/OutgoingServerService.sys.mjs:121
sendMailMessage resource:///modules/OutgoingServerService.sys.mjs:106
_deliverAsMail resource:///modules/MessageSend.sys.mjs:1138
_deliverMessage resource:///modules/MessageSend.sys.mjs:807
createAndSendMessage resource:///modules/MessageSend.sys.mjs:141
CompleteGenericSendMessage chrome://messenger/content/messengercompose/MsgComposeCommands.js:6443
GenericSendMessage chrome://messenger/content/messengercompose/MsgComposeCommands.js:6359
SendMessage chrome://messenger/content/messengercompose/MsgComposeCommands.js:6971
doCommand chrome://messenger/content/messengercompose/MsgComposeCommands.js:1083
doCommand chrome://messenger/content/messengercompose/MsgComposeCommands.js:1261
goDoCommand chrome://messenger/content/globalOverlay.js:99
oncommand chrome://messenger/content/messengercompose/messengercompose.xhtml:1

mailnews.send: Sending failed; Unable to authenticate to Outgoing server (SMTP) smtp.office365.com. Please check the password and verify the 'Authentication method' in 'Account Settings | Outgoing server (SMTP)'., exitCode=2153066805, originalMsgURI= MessageSend.sys.mjs:319:32

fail resource:///modules/MessageSend.sys.mjs:319
_deliveryExitProcessing resource:///modules/MessageSend.sys.mjs:669
sendDeliveryCallback resource:///modules/MessageSend.sys.mjs:723
OnStopRunningUrl resource:///modules/MessageSend.sys.mjs:1417
onStopRequest resource:///modules/OutgoingServerService.sys.mjs:117
onerror resource:///modules/SmtpServer.sys.mjs:675
_onNsError resource:///modules/SmtpClient.sys.mjs:567
_onAuthFailed resource:///modules/SmtpClient.sys.mjs:828
_actionAUTHComplete resource:///modules/SmtpClient.sys.mjs:1187
_onCommand resource:///modules/SmtpClient.sys.mjs:607
_parse resource:///modules/SmtpClient.sys.mjs:404
_onData resource:///modules/SmtpClient.sys.mjs:461
_onOpen resource:///modules/SmtpClient.sys.mjs:433
(Async: EventHandlerNonNull)
connect resource:///modules/SmtpClient.sys.mjs:142
sendMailMessage resource:///modules/SmtpServer.sys.mjs:678
sendMailMessage resource:///modules/OutgoingServerService.sys.mjs:121
sendMailMessage resource:///modules/OutgoingServerService.sys.mjs:106
_deliverAsMail resource:///modules/MessageSend.sys.mjs:1138
_deliverMessage resource:///modules/MessageSend.sys.mjs:807
createAndSendMessage resource:///modules/MessageSend.sys.mjs:141
CompleteGenericSendMessage chrome://messenger/content/messengercompose/MsgComposeCommands.js:6443
GenericSendMessage chrome://messenger/content/messengercompose/MsgComposeCommands.js:6359
SendMessage chrome://messenger/content/messengercompose/MsgComposeCommands.js:6971
doCommand chrome://messenger/content/messengercompose/MsgComposeCommands.js:1083
doCommand chrome://messenger/content/messengercompose/MsgComposeCommands.js:1261
goDoCommand chrome://messenger/content/globalOverlay.js:99
oncommand chrome://messenger/content/messengercompose/messengercompose.xhtml:1

I asked another user - Linux Debian

Support Forum:
https://support.mozilla.org/en-US/questions/1451659?page=3#answer-1676786

Error console info - so it can be compared with previous.

mailnews.smtp: Command failed: 535 Authentication unsuccessful [MN2PR05CA0041.namprd05.prod.outlook.com 2024-09-25T20:33:37.105Z 08DCDD14E4ECBF59]; currentAction=_actionAUTH_XOAUTH2 SmtpClient.sys.mjs:602:19

_onCommand resource:///modules/SmtpClient.sys.mjs:602
_parse resource:///modules/SmtpClient.sys.mjs:404
_onData resource:///modules/SmtpClient.sys.mjs:461

mailnews.smtp: Command failed: 500 Unrecognized command 'Length: 7' [MN2PR05CA0041.namprd05.prod.outlook.com 2024-09-25T20:33:42.231Z 08DCDD14E4ECBF59]; currentAction=_actionAUTHComplete SmtpClient.sys.mjs:602:19

_onCommand resource:///modules/SmtpClient.sys.mjs:602
_parse resource:///modules/SmtpClient.sys.mjs:404
_onData resource:///modules/SmtpClient.sys.mjs:461

mailnews.smtp: Authentication failed: Unrecognized command 'Length: 7' [MN2PR05CA0041.namprd05.prod.outlook.com 2024-09-25T20:33:42.231Z 08DCDD14E4ECBF59] SmtpClient.sys.mjs:786:17

_onAuthFailed resource:///modules/SmtpClient.sys.mjs:786
_actionAUTHComplete resource:///modules/SmtpClient.sys.mjs:1187
_onCommand resource:///modules/SmtpClient.sys.mjs:607
_parse resource:///modules/SmtpClient.sys.mjs:404
_onData resource:///modules/SmtpClient.sys.mjs:461

mailnews.smtp: Authentication failed: Unrecognized command 'Length: 7' [MN2PR05CA0041.namprd05.prod.outlook.com 2024-09-25T20:33:42.231Z 08DCDD14E4ECBF59] SmtpClient.sys.mjs:827:19

_onAuthFailed resource:///modules/SmtpClient.sys.mjs:827
_actionAUTHComplete resource:///modules/SmtpClient.sys.mjs:1187
_onCommand resource:///modules/SmtpClient.sys.mjs:607
_parse resource:///modules/SmtpClient.sys.mjs:404
_onData resource:///modules/SmtpClient.sys.mjs:461

mailnews.send: Sending failed; Unable to authenticate to Outgoing server (SMTP) . Please check the password and verify the 'Authentication method' in 'Account Settings | Outgoing server (SMTP)'., exitCode=2153066805, originalMsgURI=imap-message://xxxx%40hotmail.com@outlook.office365.com/Drafts#2581 MessageSend.sys.mjs:319:32

fail resource:///modules/MessageSend.sys.mjs:319
_deliveryExitProcessing resource:///modules/MessageSend.sys.mjs:669
sendDeliveryCallback resource:///modules/MessageSend.sys.mjs:723
OnStopRunningUrl resource:///modules/MessageSend.sys.mjs:1417
onStopRequest resource:///modules/OutgoingServerService.sys.mjs:117
onerror resource:///modules/SmtpServer.sys.mjs:675
_onNsError resource:///modules/SmtpClient.sys.mjs:567
_onAuthFailed resource:///modules/SmtpClient.sys.mjs:828
_actionAUTHComplete resource:///modules/SmtpClient.sys.mjs:1187
_onCommand resource:///modules/SmtpClient.sys.mjs:607
_parse resource:///modules/SmtpClient.sys.mjs:404
_onData resource:///modules/SmtpClient.sys.mjs:461

Important feedback:

I asked a user to help with Error Console data.
see : https://support.mozilla.org/en-US/questions/1464666?page=2#answer-1676735
They cleared error console, attempted to send, checked error console and this was the result:
mailnews.smtp: Command failed: 535 Authentication unsuccessful, SmtpClientAuthentication is disabled for the Tenant. Visit https://aka.ms/smtp_auth_disabled for more information. [BL1PR13CA0131.namprd13.prod.outlook.com 2024-09-25T16:17:00.055Z 08DCDC7DB9525546]; currentAction=_actionAUTH_XOAUTH2 SmtpClient.sys.mjs:602:19

The link mentioned in error console : https://aka.ms/smtp_auth_disabled
That link goes to this location - I specifically include the info on 'enable smtp':
https://learn.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/authenticated-client-smtp-submission#enable-smtp-auth-for-specific-mailboxes

The user discovered they were not enabled for SMTP.
After switching it on - all now works.
But that is not necessarilly the same issue as the other user.
It's just worth while checking error console to see people also get that 'disabled for the Tenant' error mesasge.

Another user with problems in crrent release.

TB 128.2.3esr (64-bit) and 131.0b6 (32-bit)
Microsoft Win 11 Pro, 23H2, build 22631.4169, Windows Feature Experience Pack 1000.22700.1034.0
hotmail email address - same as user mentioned in comment 32

Note they also supplied error console data
https://support.mozilla.org/en-US/questions/1465652#answer-1678467
It also had the 'Authentication failed: Unrecognized command 'Length: 7' '
Error console looks very similar.

Feedback - This is a heads up on another reason why SMTP fails.
If your 'Error Console' says something like this:

mailnews.smtp: Command failed: 535 Authentication unsuccessful [MN2PR05CA0041.namprd05.prod.outlook.com 2024-09-25T20:33:37.105Z 08DCDD14E4ECBF59]; currentAction=_actionAUTH_XOAUTH2 SmtpClient.sys.mjs:602:19

mailnews.smtp: Command failed: 500 Unrecognized command 'Length: 7' [MN2PR05CA0041.namprd05.prod.outlook.com 2024-09-25T20:33:42.231Z 08DCDD14E4ECBF59]; currentAction=_actionAUTHComplete SmtpClient.sys.mjs:602:19

I asked user to check 'alias' email address.
Some people may have a hotmail email address and also that hotmail account allowed some additional/alias email addresses. But to send you might need to use the primary not the alias email address. Confirm email address is primary.

User Response - alias was issue -

You were correct on aliases.
I've been using www.pobox.com as an email relay to keep a common email address, even if I switch email providers. When someone sends an email to my pobox.com, it gets routed to my current email provider. In Thunderbird, I have it set up Reply-to-Address to the pobox.com email address.
However, some people were getting confused on whether my email address was hotmail.com or pobox.com, as it would show the From as hotmail.com, but when they reply, it shows pobox.com. So, I added the pobox.com as an alias and made it my primary...

This was causing the issue, fixed when I made my hotmail.com the primary.

https://support.mozilla.org/en-US/questions/1451659?page=4#answer-1680355

In this instance not caused by a bug.

Alex, are you still seeing this problem?

Flags: needinfo?(alex.segala)

Neil: is it working now?

Added info as this has been discovered in Support Forum, so I'm just adding as info may be helpful.
Microsoft has altered Athentication to Oauth2 - this is known.
Microsoft have also changed how it works when it comes to passwords. All outlook.com/hotmail.com/live.com and msn.com account now need to use same password as the MS account. This is because they have added all those account email addresses as 'alias' accounts.
Microsoft has also altered what can be used by any account for SMTP. No matter what account, eg: hotmail, it can use incoming username as eg: hotmail email address, but if another account/email address has been set as 'primary' eg: outlook.com email address, then the SMTP setting for 'username' must use outlook.com email address. You can logon to webmail MS account and see what is set as primary and you can choose what is set as primary.

You need to log in before you can comment on or make changes to this bug.