Bug 1040224 - 403 Error - TD Bank
Summary: 403 Error - TD Bank
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: aqbanking
Version: 19
Hardware: x86_64
OS: Linux
unspecified
medium
Target Milestone: ---
Assignee: Bill Nottingham
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-12-11 01:17 UTC by dch
Modified: 2014-03-17 03:34 UTC (History)
3 users (show)

Fixed In Version: aqbanking-5.0.25-4.fc19
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2013-12-12 19:53:59 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description dch 2013-12-11 01:17:41 UTC
To check if the problem was on TD's end, I installed the 2013 version of Quicken to a Win 7 virtual box. It gets the account list and downloads all the transactions flawlessly.

From either KMyMoney or GnuCash I receive a "403" prohibited error. I do not know how to find out what settings Quicken is using but TD confirms that the default settings from AQ Banking are correct (1001/CommerceBank/https://onlinebanking.tdbank.com/scripts/serverext.dll).

I have deleted ~/.aqbanking and started from scratch numerous times. Same thing.
I have also tried many different emulation settings with no difference. Here's the log:

20:05:39
Sending request...
20:05:39
Connecting to server...
20:05:39
Resolving hostname "onlinebanking.tdbank.com" ...
20:05:39
IP address is "23.202.75.116"
20:05:39
Connecting to "onlinebanking.tdbank.com"
20:05:39
Connected to "onlinebanking.tdbank.com"
20:05:40
Connected.
20:05:40
Sending message...
20:05:40
Message sent.
20:05:40
Waiting for response...
20:05:40
Receiving response...
20:05:40
HTTP-Status: 403 (Forbidden)
20:05:40
Operation finished, you can now close this window.

I hope that I have provided enough and the right information. Thanks.

Comment 1 Bill Nottingham 2013-12-11 15:54:15 UTC
1) Did this ever work (i.e, has it broken for you in a particular update)
2) There's some debugging/setup info at:
   http://wiki.gnucash.org/wiki/OFX_Direct_Connect_Bank_Settings#TD_Bank
Do your settings match this?

Comment 2 dch 2013-12-11 21:48:35 UTC
(In reply to Bill Nottingham from comment #1)

Hi Bill. Thanks for the reply.

> 1) Did this ever work (i.e, has it broken for you in a particular update)

New user,

> 2) There's some debugging/setup info at:
>    http://wiki.gnucash.org/wiki/OFX_Direct_Connect_Bank_Settings#TD_Bank
> Do your settings match this?

Tried those. Same result. It changes the subdomain and version number from the settings created by AQB. There doesn't seem to be any "server capabilities" setting. Apparently in June Intuit faced the same problem ( https://qlc.intuit.com/announcements/178411 ) which has since been resolved.

Comment 3 dch 2013-12-12 05:50:06 UTC
This might help. Here is a portion of the Quicken 2013/Win 7 log file. I tried AQB with the (apparently) revised FID, APPVER and URL.Same 403 error. Maybe you will see something that I missed:

<!-- ***** SEND to https://ofx.tdbank.com/scripts/serverext.dll at 00:21:59 on 20131212 ***** -->

<!--
OFXHEADER:100
DATA:OFXSGML
VERSION:102
SECURITY:NONE
ENCODING:USASCII
CHARSET:1252
COMPRESSION:NONE
OLDFILEUID:7CBB4BF2-7BB0-1000-B145-D5755D5F0026
NEWFILEUID:BAB9A870-7BB0-1000-9C89-D77F94D70026

-->
<OFX>
<SIGNONMSGSRQV1>
<SONRQ>
<DTCLIENT>20131212002159.123[-5:EST]
<USERID>redacted
<USERPASS>X<GENUSERKEY>N
<LANGUAGE>ENG
<FI>
<ORG>CommerceBank
<FID>1002
</FI>
<APPID>QWIN 
<APPVER>2200
</SONRQ>
</SIGNONMSGSRQV1>
<BANKMSGSRQV1>
<BANKMAILSYNCRQ>
<TOKEN>25383520
<REJECTIFMISSING>N
<INCIMAGES>N
<USEHTML>N
<BANKACCTFROM>
<BANKID>011103093
<ACCTID>redacted
<ACCTTYPE>CHECKING
</BANKACCTFROM>
</BANKMAILSYNCRQ>
<INTRASYNCRQ>
<TOKEN>0
<REJECTIFMISSING>N
<BANKACCTFROM>
<BANKID>011103093
<ACCTID>redacted
<ACCTTYPE>CHECKING
</BANKACCTFROM>
</INTRASYNCRQ>
</BANKMSGSRQV1>
</OFX>

<!-- ***** RECV from https://ofx.tdbank.com/scripts/serverext.dll at 00:22:00 on 20131212 ***** -->

Comment 4 Bill Nottingham 2013-12-12 19:31:59 UTC
Can you try the test aqbanking packages at:
 http://koji.fedoraproject.org/koji/taskinfo?taskID=6280419

It includes two upstream patches - one for OFXDirectConnect initiation and one that enables a little better debugging in some cases. I don't know if it will help your case right now, but it might.

Comment 5 dch 2013-12-12 19:53:59 UTC
(In reply to Bill Nottingham from comment #4)
> Can you try the test aqbanking packages at:
>  http://koji.fedoraproject.org/koji/taskinfo?taskID=6280419
> 
> It includes two upstream patches - one for OFXDirectConnect initiation and
> one that enables a little better debugging in some cases. I don't know if it
> will help your case right now, but it might.

Holy crap. That seems to work with the settings from the Quicken log. You might want to change the default settings for TD Bank.

FID changes from 1001 to 1002
URL changes from https://onlinebanking.tdbank.com/scripts/serverext.dll TO https://ofx.tdbank.com/scripts/serverext.dll APPVER changes to 2200

I write "seems to work" because it (finally) retrieved the account. However, all of my transactions were up to date so I have not tested that part.

Thanks for your help. I changed the status of this report to "closed - rawhide."

Comment 6 Fedora Update System 2013-12-12 21:14:55 UTC
aqbanking-5.0.25-4.fc20 has been submitted as an update for Fedora 20.
https://admin.fedoraproject.org/updates/aqbanking-5.0.25-4.fc20

Comment 7 Fedora Update System 2013-12-12 21:23:13 UTC
aqbanking-5.0.25-4.fc19 has been submitted as an update for Fedora 19.
https://admin.fedoraproject.org/updates/aqbanking-5.0.25-4.fc19

Comment 8 Fedora Update System 2014-01-07 09:33:53 UTC
aqbanking-5.0.25-4.fc20 has been pushed to the Fedora 20 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 9 Fedora Update System 2014-01-07 09:45:31 UTC
aqbanking-5.0.25-4.fc19 has been pushed to the Fedora 19 stable repository.  If problems still persist, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.