Office365, Indy and SMTP
lazarus / 38-Networking and Web Programming

----------------------------------------------------------------------
kinu · 2024-05-15 09:13

The error when I doCode: Pascal  [Select][+][-]window.onload =
function(){var x1 = document.getElementById("main_content_section");
if (x1) { var x = document.getElementsByClassName("geshi");for (var i
= 0; i  SMTP.Authenticate is

Code: Pascal  [Select][+][-]window.onload = function(){var x1 =
document.getElementById("main_content_section"); if (x1) { var x =
document.getElementsByClassName("geshi");for (var i = 0; i Error
connecting with SSL.EOF was observed that violates the protocol.
My settings in SMTP component:

Authtype - satDefault
Host - 'smtp.office365.com'
Port - 587
Username and Password set too.
UseTLS - utUseExplicitTLS

and in SSLHandler

SSLOptions.Method - sslvTLSv1
so in SSLVersion is the same.

What am I doing wrong?

----------------------------------------------------------------------
rvk · 2024-05-15 10:20

sslvTLSv1 ??????? for smtp.office365.com ?
That seems really old.

QuoteWe have already disabled TLS 1.0 and 1.1 for most Microsoft 365
services in the world wide environment. For Microsoft 365 operated by
21 Vianet, TLS1.0 and TLS1.1 will be disabled on June 30,
2023.https://learn.microsoft.com/en-us/exchange/clients-and-mobile-in-
exchange-online/opt-in-exchange-online-endpoint-for-legacy-tls-using-
smtp-auth

----------------------------------------------------------------------
Remy Lebeau · 2024-05-15 19:14

Quote from: kinu on May 15, 2024, 11:13:39 amCode: Pascal
 [Select][+][-]window.onload = function(){var x1 =
document.getElementById("main_content_section"); if (x1) { var x =
document.getElementsByClassName("geshi");for (var i = 0; i Error
connecting with SSL.EOF was observed that violates the protocol.
That means the server is closing the TCP connection during the TLS
handshake without sending a TLS alert first to explain why.

Quote from: rvk on May 15, 2024, 12:20:11 pmQuoteWe have already
disabled TLS 1.0 and 1.1 for most Microsoft 365 services in the world
wide environment. For Microsoft 365 operated by 21 Vianet, TLS1.0 and
TLS1.1 will be disabled on June 30, 2023.
IOW, change SSLOptions.Method to sslvTLSv1_2 instead.

----------------------------------------------------------------------
kinu · 2024-05-16 11:57

Thank you. Set it to TLS 1_2. Then I got an error about user
permissions:
Code: Pascal  [Select][+][-]window.onload = function(){var x1 =
document.getElementById("main_content_section"); if (x1) { var x =
document.getElementsByClassName("geshi");for (var i = 0; i  ERROR:
Authentication unsuccessful, user is locked by your organization's
security defaults policy. Contact your administrator.
[longstringwithmydomainandsomethingmore]
So I made and check the changes in Exchange console:

Code: Pascal  [Select][+][-]window.onload = function(){var x1 =
document.getElementById("main_content_section"); if (x1) { var x =
document.getElementsByClassName("geshi");for (var i = 0; i PS
C:\Users\miguel> Get-TransportConfig | Format-List
SmtpClientAuthenticationDisabledSmtpClientAuthenticationDisabled :
True PS C:\Users\miguel> Set-TransportConfig
-SmtpClientAuthenticationDisabled $false PS C:\Users\miguel> Get-
TransportConfig | Format-List
SmtpClientAuthenticationDisabledSmtpClientAuthenticationDisabled :
False And then the user, that is ok:

Code: Pascal  [Select][+][-]window.onload = function(){var x1 =
document.getElementById("main_content_section"); if (x1) { var x =
document.getElementsByClassName("geshi");for (var i = 0; i GET-
CASMailbox -Identity user@domain.com | Format-list
SmtpClientAuthenticationDisabledSmtpClientAuthenticationDisabled :
False
But I keep having same user locked error. I think this is an Office365
error now, not Indy nor Lazarus related, but could you help?

----------------------------------------------------------------------
Remy Lebeau · 2024-05-16 18:31

Quote from: kinu on May 16, 2024, 01:57:57 pmBut I keep having same
user locked error. I think this is an Office365 error now, not Indy
nor Lazarus related, but could you help?

Sorry, I don't know anything about how to address that issue.  You
will probably have to ask Microsoft.

----------------------------------------------------------------------
rvk · 2024-05-16 18:36

Lots to find if you type this in Google.
But you probably could ask your system administrator.

https://www.google.com/search?q=ERROR%3A+Authentication+unsuccessful%2
C+user+is+locked+by+your+organization%27s+security+defaults+policy.+Co
ntact+your+administrator

----------------------------------------------------------------------
kinu · 2024-05-20 10:52

Hello again. After a lot of struggle, seems that change things in O365
to allow external SMTP use makes it insecure. Yo have to allow SMTP
for the "transport", for the user, and disable "default security
options" for your organization. My solution: use a personal google
account to send mails from my apps. It just works.

Thank you all for your help and comments.