Thunderbird+Gmail setup failure
I'm trying to set up Thunderbird (version 102.6.1, under Windows 10) to work with my Gmail account. I hope someone can help me understand what is happening.
First I enabled IMAP protocol in Gmail. Then I started "Add a new account" in Thunderbird and entered my name, email address, and email password. Thunderbird displayed details of the configuration it set for me, which looked correct: incoming, IMAP with SSL/TLS; outgoing, SMTP with SSL/TLS.
When I clicked Done, Thunderbird opened a browser window in which Gmail prompted me to sign in. The correct email address was prefilled.
I clicked Next and was prompted for the password; I entered the password and clicked Sign In.
Gmail displayed a page that asked whether Thunderbird should be allowed to access my account. I clicked Allow.
The browser window closed, returning me to the Thunderbird configuration screen, which displayed both of these messages:
- (Yellow background) Unable to log in at server. Probably wrong configuration username or password.
- (Green background) (checkmark) Checking permission.
So, Thunderbird seems to be saying that Google failed to authenticate me, and simultaneously, that it's in the process of authenticating me (although it never reports that it has finished).
If Google failed to authenticate me, why did it prompt me to allow or deny Thunderbird access?
If Google successfully authenticated me, why does Thunderbird report that it failed?
One possible answer is that I entered my password correctly when Gmail prompted me, but entered it incorrectly in Thunderbird. But I tested that possibility by copying the password from the value I entered in Thunderbird and pasting it into Gmail's password prompt. Gmail said it was correct, so in Thunderbird it must also be correct.
All Replies (8)
The successful completion of that authorization flow requires that you have cookies enabled in Thunderbird and that nothing else uses the "localhost" In the past folk have had web servers, development tools etc that have "consumed" the returned authentication as they were also using the localhost. I have also heard of antivirus products block localhost as it has been used at times as a virus vector
There is also the opportunity to log the new account wizard to see exactly what is happening. I have not done that, but there is always a first time.
See https://thunderbirdtweaks.blogspot.com/2021/10/logging-new-account-wizard.html
Matt, thank you for your response. I'm not sure what you mean about cookies, since Thunderbird is not a browser.
This system is a new build, and since I'm not planning to do anything on it that would require a web server, I haven't installed one. I can't rule out the possibility that some application I did install included a web server of its own, but I can't think of a reason why any of them would. I paged through the installed applications in "Add or Remove Programs," and I didn't see anything that I recognized as a web server.
I tried connecting again and captured a log, which I'm appending to this message. I don't know how to interpret it, but it looks to me like something rather fundamental is wrong.
NS_ERROR_NOT_IMPLEMENTED: Component returned failure code: 0x80004001 (NS_ERROR_NOT_IMPLEMENTED) [nsIRequest.name] 3 OAuth2.jsm:171
NS_ERROR_NOT_IMPLEMENTED: Component returned failure code: 0x80004001 (NS_ERROR_NOT_IMPLEMENTED) [nsIRequest.name] 2 OAuth2.jsm:171
NS_ERROR_NOT_IMPLEMENTED: Component returned failure code: 0x80004001 (NS_ERROR_NOT_IMPLEMENTED) [nsIRequest.name] OAuth2.jsm:171
Not showing popup notification password with the message Save login for google.com? browserRequest.js:12:13
NS_ERROR_NOT_IMPLEMENTED: Component returned failure code: 0x80004001 (NS_ERROR_NOT_IMPLEMENTED) [nsIRequest.name] OAuth2.jsm:171
NS_ERROR_NOT_IMPLEMENTED: Component returned failure code: 0x80004001 (NS_ERROR_NOT_IMPLEMENTED) [nsIRequest.name] 2 OAuth2.jsm:171
Some cookies are misusing the recommended “SameSite“ attribute 6
NS_ERROR_NOT_IMPLEMENTED: Component returned failure code: 0x80004001 (NS_ERROR_NOT_IMPLEMENTED) [nsIRequest.name] 3 OAuth2.jsm:171
NS_ERROR_NOT_IMPLEMENTED: Component returned failure code: 0x80004001 (NS_ERROR_NOT_IMPLEMENTED) [nsIRequest.name] OAuth2.jsm:171
NS_ERROR_NOT_IMPLEMENTED: Component returned failure code: 0x80004001 (NS_ERROR_NOT_IMPLEMENTED) [nsIRequest.name] OAuth2.jsm:171
Loading failed for the <script> with source “chrome://global/content/netError.js”. neterror:128:4
NS_ERROR_ABORT: User canceled primary password entry 3 crypto-SDR.js:90
I'm not sure what you mean about cookies, since Thunderbird is not a browser.
As far as OAuth2 authentication is concerned Thunderbird acts like a browser. Also see https://support.mozilla.org/en-US/kb/automatic-conversion-google-mail-accounts-oauth20
@matt, can you respond to my 1/27 message, please? Since you suggested I get an error log, I assume you planned to analyze it for me -- there was no point otherwise.
@christ1, I set up my account to use Oauth2 authentication, in addition to the settings that Google advises. When I tried to complete the setup I got an error box that says the site has an invalid security certificate: "it hasn't been verified as issued by a trusted authority using a secure signature."
I've gotten that message from perfectly legitimate sites that weren't meticulous about their own security practices, but I wouldn't expect to get it from Gmail unless something were really wrong. When I click Get Certificate, it returns "This site attempts to identify itself with invalid information. / No Information Available. / Unable to obtain identification status for this site."
For the moment, I'm not trying to go further. Can you comment, please?
When I tried to complete the setup I got an error box that says the site has an invalid security certificate
Are you getting the Security Exception Prompt? If so, can you post a screenshot, please? https://support.mozilla.org/kb/how-do-i-create-screenshot-my-problem
What is your anti-virus/security software?
I was getting the Security Exception warning box -- I assume that's what you're referring to. I can't provide it now because I've uninstalled Firefox in order to do a clean install. (I'm having problems with that too -- will start a separate thread about it.) I've been communicating with my Internet service provider's tech support people, and after several other unsuccessful attempts to solve the problem, they recommended that.
I'd still like to know what went wrong, but I'll understand if no one can help further!
My AV software is the free version of AVG, but I began having these problems before I had installed it.
I can't provide it now because I've uninstalled Firefox
Are we talking about Firefox now or Thunderbird?
I've been communicating with my Internet service provider's tech support people, and after several other unsuccessful attempts to solve the problem, they recommended that.
You're wasting your time. Profile files are stored separately from the Thunderbird program files. The program files are static and do not change (except when you upgrade the Thunderbird application version). Because we store profile and program files separately, you can uninstall Thunderbird without losing your messages and settings, and if something goes wrong with a Thunderbird update your information will still be available. It also means that you don't have to reinstall Thunderbird in order to delete your information or troubleshoot a problem.
My AV software is the free version of AVG
Third-party antivirus software can interfere with Thunderbird's secure connection to the server. AVG is one of them. See https://support.mozilla.org/en-US/kb/error-codes-secure-websites#w_avastavg
My experience, fot Gmail and many other users who post similar problems, is to NOT enter password during setup. Delete the account, start over and do not enter the account password. Google will still prompt and go through its dance of authentication.