Latest macOS Mojave update (10.14.4) and Mail.app Google accounts issue

apple.stackexchange https://apple.stackexchange.com/questions/356013

Domanda

After updating to macOS Mojave 10.14.4 two days ago and still, I have an issue with taking online Google accounts in Apple Mail.app.

This problem appeared immediately after the update, although it wasn't there before. Also after this update, Apple Mail requested to re-login through Safari and it was simple authentication.

È stato utile?

Soluzione

A quick Google search reveals that it's a bug in Mail.app in macOS Mojave 10.14.4 update.

From this post on MacRumors, a popular independent Apple news blog:

Apple earlier this week released macOS Mojave 10.14.4, which has had the unfortunate side effect of rendering the Mail app unusable for some who use Gmail services for their email addresses.

After installing the macOS 10.14.4 update and opening the Mail app, Gmail users are asked to authenticate their email addresses using a Google web login form.

Unfortunately, the authentication process does not stick, and shortly after authenticating, the Mail app asks for authentication once again or refuses to work, listing all Gmail accounts as offline.

Additionally,

Some users have had success setting up their email accounts using IMAP as a workaround. Those who have contacted Apple support have been told that a fix is in the works, so the bug could be addressed in the near future.

Appears that the issue has been acknowledged and the fix is a work in progress.

Some other links worth checking which points to possible resolution:

Altri suggerimenti

No.

The update broke access to some Library configs that are under control of System Integrity Protection(SIP).

Boot to the recover console, disable SIP with 'csrutil disable' in the terminal, then boot into the OS, go into Internet Accounts and select Google as normal.

After following the steps to give your Mac permissions to your Google objects(mail, calendar, etc.), boot back into the recovery console and re-enable SIP by running 'csrutil enable'. Boot back into the OS and compute on.

I got the hint to do this by looking into the console logs in the console utility, but I have no idea which log I searched for 'google' or 'accounts' in, but I found a problem mentions an error with a 'file-write-xattr', so that gave me the idea that SIP was involved.

Someone should be able to track down the issue and get the errant permissions logged with Apple so the fix can go out with the next patch, or set a sticky here with a more detailed explanation and fix, and not just a work-around.

The issue:

As an update to what I've commented above, I had exactly this issue with accounts which were originally created as username@googlemail.com instead of username@gmail.com. Since I always migrated my macOS, it is likely now expecting a @googlemail response during verification, but Google is returning the @gmail instead.

The solution:

To everyone that is still having issues, this solution simply overwrites the response that Google's servers are issuing. I'm reproducing the following how-to posted by Gannet on the MacRumours Forums:

  1. Download, install and run the app Charles. If this is your first time using Charles it should prompt you to authorize automatic proxy configuration. Do this. (Otherwise just make sure the macOS proxy is enabled and working)
  2. From the "Help" menu choose "SSL Proxying" > "Install Charles Root Certificate". Once the certificate is installed, find it in your keychain (type Charles into the search), open it, expand the Trust section and set to Always Trust. You will be prompted for your password when closing it.
  3. Back in Charles, select "SSL Proxying Settings..." from the "Proxy" menu .
  4. Add a new location with Host: people.googleapis.com .
  5. From the Tools menu choose "Rewrite…", enable Rewrite, and click the "Add" button.

  6. Add a new location with Host: people.googleapis.com. Add a new action with the following details:

    • Type: Body
    • Where: Response
    • Replace Value: {"names":[{"metadata":{"primary":true},"displayName":"User Name}],"emailAddresses":[{"value":"user.name@gmail.com"}]} where of course you put in your actual User Name and user.name@gmail.com values. In the end, it should look similar to this:

Adding the rewrite rule editing the rewrite rule

  1. Once you "apply" this, you're all set. Open "Internet Accounts" in the system preferences (or open Mail.app), and follow the authorisation procedure.
  2. Once everything is working, you can either repeat the steps for each of your problematic accounts, or Quit Charles and feel free to delete the rewrite rules as well as the certificate from your Keychain.

Open "Internet Accounts" in "System Preferences" and click on every Google account so that it will prompt you to authenticate via Safari.

After updating, it prompted me to open Safari to authenticate one of my emails - resulting in that email working. Connection doctor showed all the other emails as offline, so I deduced that I needed to follow the same flow for all of them.

When gmail fails to remain connected on my iMac and MacBook Air running Mojave (which seems to happen after a few hours of inactivity on the account), Mail's window shows an error icon at the account listing (on the left), and a notation "Login Failed" (on the right):

enter image description here

If I put the cursor on the "Login Failed" words, the words turn into a button. Clicking on the button restores the connection. The restoration isn't permanent, but it's easy to restore when the connection fails again, and is much less trouble than the other suggestions for remediation...until Apple or Google update the software to take care of this issue permanently.

I retried today (2019-04-01) and despite the date g-suite accounts are now working.

I don't think this is a bug that affects everyone on 10.14.4 and uses gsuite.

Autorizzato sotto: CC-BY-SA insieme a attribuzione
Non affiliato a apple.stackexchange
scroll top