Email Modern Authentication with v11

[PXAbstraction]

Hey all.

We look after a couple of Veeam clients. One of them is on v11 and not prepared to upgrade yet. They also have Veeam email several people when there are warnings or errors on jobs. However, while v12 makes it easy to send emails via the now required Modern Authentication for 365, v11 doesn't seem to have an option for it. It was at this time that I also learned that app password were removed with basic authentication, so that's not an option either. I figure since v11 is still supported, that there must be a solution to this, but I've tried to find articles or posts on it and have come up empty.

Anyone know if there's a way to do this?

Thanks.

[Mildur]

Hi Gerry

In V11, you can still use SMTP Basic Auth.
You need to enable that feature in M365 for the mail account used in Veeam:
https://learn.microsoft.com/en-us/excha ... submission

Best,
Fabian

[PXAbstraction]

I thought basic auth has been completely deep sixed, but maybe I've got my timelines wrong. I'll check it out today. Thanks!

[PXAbstraction]

So I was away on a trip for a week and couldn't look into this until this morning, but that article doesn't seem to address the issue. It talks about enabling and disabling SMTP AUTH on mailboxes, but changing that setting doesn't fix the issue. The article does talk about Basic Authentication, but it's outdated in that respect as Basic Authentication is now completely dead.

[Mildur]

Basic authentication for SMTP protocol is not dead yet.

https://learn.microsoft.com/en-us/excha ... -smtp-auth

SMTP AUTH will still be available when Basic authentication is permanently disabled on October 1, 2022. The reason SMTP will still be available is that many multi-function devices such as printers and scanners can't be updated to use modern authentication. However, we strongly encourage customers to move away from using Basic authentication with SMTP AUTH when possible. Other options for sending authenticated mail include using alternative protocols, such as the Microsoft Graph API.

You should be able to use it as a workaround till your customers can update to V12.

Best,
Fabian

[PXAbstraction]

Very weird. Even following the procedure in the article, I'm still not able to get it authenticating. I'll kick at it some more and let people know. Thanks.

[Mildur]

Let me run a test tomorrow with basic AUTH and SMTP. I'll update you about my findings.

best,
Fabian

[PXAbstraction]

I actually submitted a ticket with support before I went away and they just linked me the time honoured MS article on setting up MFPs with 365: https://learn.microsoft.com/en-us/excha ... irect-send

I've been trying the Direct Send method in this case, which is what support nudged me to. I disabled SMTP AUTH on the mailbox and unticked the credentials in Veeam, but it still gives me an authentication error. I get the same error if I try to use the standard send method (method 1) with SMTP Authentication disabled.

I do want to get this client on v12, I just had issues with another client when we upgraded and a bunch of their jobs got converted to Legacy jobs. But that's another issue.

[Gostev]

It's not an issue, they will continue running fine.

[PXAbstraction]

Yeah, they're supposed to, but several jobs with my other client had multiple issues that were a headache to fix, so this one's being cautious. But it's gotta' be done so I might be able to use this to convince them.

[Mildur]

Hi Gerry

I tried in my lab. The following commands will led you use Basic authentification to send mails:

Code: Select all

#Mandatory: Enable SMTP Basic Auth for the Tenant
Set-TransportConfig -SmtpClientAuthenticationDisabled $false

#Enable SMTP Basic Auth for the Mailbox you use to send the mails
Set-CASMailbox -Identity <MAILBOX> -SmtpClientAuthenticationDisabled $false

Then you can use the following values to send the mail:
- smtp-server: smtp.office365.com
- Port: 587
- Connect using SSL: Enabled

Please reconsider updating to v12 first, instead of enabling Basic AUTH for SMTP.

Best,
Fabian

[PXAbstraction]

I will try that today. v12 is something I will be pushing to do sooner rather than later, but getting these alerts working again is the immediate priority. I will report back. Thanks!

[PXAbstraction]

Your solution worked! Thank you very much! I've spoken to the client and they are going to be scheduling me a time next month to upgrade them to v12, so I'll be able to undo this soon. Cheers!

[Mildur]

Thank you for the feedback.
I'm glad you got it to work till you can update this customer to V12.

Best,
Fabian