Error: Unsupported authentication mechanism(s) detected about node-imap

[freshmatrix]

Forgot to mention that I am using:
node v0.6.15 and with latest node-imap

[mscdex]

I've published v0.3.0 now, that version should fix this problem.

[freshmatrix]

I updated to v0.3.0 but still having the same issue.

It works beautifully with other non-gmail imap server...

[mscdex]

Hmmm... try this: add the debug option to the connection config and set it to a function like console.error.
Then create a gist of the debug output, after censoring the credentials.

[freshmatrix]

Looks like capabilities from imap.gmail.com does not contain AUTH=PLAIN
I am using Google biz app's gmail, though regular gmail should be the same..

console.log(this.capabilities) prints:

  [ 'IMAP4REV1',
    'UNSELECT',
    'IDLE',
    'NAMESPACE',
    'QUOTA',
    'ID',
    'XLIST',
    'CHILDREN',
    'X-GM-EXT-1',
    'XYZZY',
    'SASL-IR',
    'AUTH=XOAUTH' ]

[mscdex]

Hmm, I'm not sure I'm familiar with that product. As far as gmail goes, I only test "plain" and "Google Apps" (the free one) gmail. With both, AUTH=PLAIN and AUTH=XOAUTH are available for authentication.

Do you have the port set to 993 and secure to true in the connection config? If so, I guess you'll have to use oauth to login to your account and/or contact google about the lack of AUTH=PLAIN support. I don't think there is anything else I can do as the only time I've heard of AUTH=PLAIN not being available (at least on gmail) is if you were not connecting securely via SSL.

[freshmatrix]

I suppose it is possible they disabled auth-plain for biz gmail (though free).

I will dig deeper and find more info.

Thanks!

On 2012-04-19, at 6:02 PM, Brian [email protected] wrote:

Hmm, I'm not sure I'm familiar with that product. As far as gmail goes, I only test "plain" and "Google Apps" (the free one) gmail. With both, AUTH=PLAIN and AUTH=XOAUTH are available for authentication.

Do you have the port set to 993 and secure to true in the connection config? If so, I guess you'll have to use oauth to login to your account and/or contact google about the lack of AUTH=PLAIN support. I don't think there is anything else I can do as the only time I've heard of AUTH=PLAIN not being available (at least on gmail) is if you were not connecting securely via SSL.

---

Reply to this email directly or view it on GitHub:
#55 (comment)

[bpierre]

Same here, AUTH=PLAIN is not avalaible with Google Apps Gmail (free).

[mscdex]

Confirmed, this must have been a recent change on their end. :\

EDIT: It's gone from free (non-google apps) gmail also!

EDIT2: Weird.... it seems plain-text login still works, they just don't advertise the capability anymore. >:\

[mscdex]

For those affected, please grab the latest copy of the master branch. I've just applied a kludge that should work for gmail (at least until they get their act together?).

Additionally I've pinged Google about this, we'll see if/how they respond to the matter.

EDIT: So, evidently due to the wording ("SHOULD" instead of "MUST") in rfc3501, IMAP servers are not required to advertise all authentication methods they support (pretty silly IMHO) in their capabilities listing. I've yet to see an IMAP server that hides this kind of information (besides Google now), especially the plaintext auth capability, which most IMAP servers use for authentication. However, I'll write up a more proper fix shortly to always try plain-text auth unless oauth is being used.

[mscdex]

This is now properly fixed in node-imap v0.3.1 and is available on npm.