[GNC] AQ Banking OFX Direct Connect

Tue Oct 20 08:35:10 EDT 2020

Once you get Citi working, you won’t have to use the extra connection with their web site — it’s a one-off authorization for each piece of software.
--
Dave Reiser
dbreiser at icloud.com


> On Oct 20, 2020, at 8:33 AM, David Reiser via gnucash-user <gnucash-user at gnucash.org> wrote:
> 
> <APPVER>2200
> 
> Is almost certainly part of your problem. That number is the way Quicken (formerly Intuit) locked out versions older than 3 years from downloading data. There may be new ways to do that now that Quicken is totally subscription based, but 2700 has been working for me lately.
> 
> Next, Citibank has (or had a year ago) a secondary authentication protocol that required you to log into their web site, find the necessary support page to tell them you were going to be logging in with some automated software, and then go out and use that software to log in to Citi’s server within 10 minutes. Citibank has been weird over the years, but it has been working for me with regard to credit card transaction data.
> 
> Amex has several entry points for data, and figuring out which one might respond favorably to your login requests is your first task. I avoid Amex whenever possible, so I will have no useful information for you.
> --
> Dave Reiser
> dbreiser at icloud.com
> 
> 
> 
> 
> 
>> On Oct 19, 2020, at 4:27 PM, Edwin Franks <dfrankssr at gmail.com> wrote:
>> 
>> I am trying to get connected to my banking institutions using the AQ Banking OFX Direct Connect module.  The application apparently authenticates my user name and password properly, but instead of returning data, it returns an error.  For my American Express credit card, it gives an “Account not found” error.  For my Citibank credit card, it gives me an Http-Status: 403 (Forbidden) error.  Below are the contents of the messages from the AQ Banking GUI and OFX.LOG files for both the American Express and Citibank attempts:
>> 
>> American Express Messages:
>> 
>> Messages shown in the AQBanking GUI:
>> 
>> AqBanking v6.2.2.0stable
>> Sending jobs to the bank(s)
>> Sorting commands by account
>> Sorting commands by account
>> Sorting commands by provider
>> Send commands to providers
>> Send commands to provider "aqofxconnect"
>> Locking customer "2"
>> Saving communication log to /tmp/ofx.log
>> Sending request...
>> Connecting to server...
>> Resolving hostname "online.americanexpress.com" ...
>> IP address is "23.67.235.83"
>> Connecting to "online.americanexpress.com"
>> Connected to "online.americanexpress.com"
>> Using GnuTLS default ciphers.
>> TLS: SSL-Ciphers negotiated: TLS1.3:ECDHE-RSA-AES-256-GCM:AEAD
>> Connected.
>> Sending message...
>> Message sent.
>> Waiting for response...
>> Receiving response...
>> HTTP-Status: 200 (OK)
>> Response received.
>> Disconnecting from server...
>> Disconnected.
>> Saving communication log to /tmp/ofx.log
>> Parsing response...
>> Status for signon request: Success (Code 0, severity "INFO")
>> The server successfully processed the request.
>> Status for transaction statement request: Account not found (Code 2003, severity "ERROR")
>> The specified account number does not correspond to one of the user's accounts.
>> Unlocking customer "2"
>> 
>> Sanitized Contents of the OFX.LOG File:
>> 
>> Sending:
>> -------------------------------------
>> OFXHEADER:100
>> DATA:OFXSGML
>> VERSION:102
>> SECURITY:NONE
>> ENCODING:USASCII
>> CHARSET:1252
>> COMPRESSION:NONE
>> OLDFILEUID:NONE
>> NEWFILEUID:20201019194220.000
>> 
>> <OFX>
>> <SIGNONMSGSRQV1>
>> <SONRQ>
>> <DTCLIENT>20201019194201.000
>> <USERID>XXXXXXXX
>> <USERPASS>XXXXXXXXXXXX
>> <LANGUAGE>ENG
>> <FI>
>> <ORG>AMEX
>> <FID>3101
>> </FI>
>> <APPID>QWIN
>> <APPVER>2200
>> </SONRQ>
>> </SIGNONMSGSRQV1>
>> <CREDITCARDMSGSRQV1>
>> <CCSTMTTRNRQ>
>> <TRNUID>20201019194220.000
>> <CLTCOOKIE>1
>> <CCSTMTRQ>
>> <CCACCTFROM>
>> <ACCTID>XXXXXXXXXXXXXXXX
>> </CCACCTFROM>
>> <INCTRAN>
>> <DTSTART>20201014000000.000
>> <DTEND>20201019000000.000
>> <INCLUDE>Y
>> </INCTRAN>
>> </CCSTMTRQ>
>> </CCSTMTTRNRQ>
>> </CREDITCARDMSGSRQV1>
>> </OFX>
>> 
>> 
>> Received:
>> -------------------------------------
>> OFXHEADER:100
>> DATA:OFXSGML
>> VERSION:102
>> SECURITY:NONE
>> ENCODING:USASCII
>> CHARSET:1252
>> COMPRESSION:NONE
>> OLDFILEUID:NONE
>> NEWFILEUID:20201019194220.000
>> 
>> <OFX><SIGNONMSGSRSV1><SONRS><STATUS><CODE>0<SEVERITY>INFO<MESSAGE>Login successful</STATUS><DTSERVER>20201019124220.670[-7:MST]<LANGUAGE>ENG<FI><ORG>AMEX<FID>3101</FI><ORIGIN.ID>FMPWeb<CUSTOMER.TYPE>BCM<START.TIME>20201019124220</SONRS></SIGNONMSGSRSV1><CREDITCARDMSGSRSV1><CCSTMTTRNRS><TRNUID>20201019194220.000<STATUS><CODE>2003<SEVERITY>ERROR</STATUS><CLTCOOKIE>1</CCSTMTTRNRS></CREDITCARDMSGSRSV1></OFX>
>> 
>> Citibank Messages:
>> 
>> Messages Shown in the AQBanking GUI:
>> 
>> AqBanking v6.2.2.0stable
>> Sending jobs to the bank(s)
>> Sorting commands by account
>> Sorting commands by account
>> Sorting commands by provider
>> Send commands to providers
>> Send commands to provider "aqofxconnect"
>> Locking customer "3"
>> Saving communication log to /tmp/ofx.log
>> Sending request...
>> Connecting to server...
>> Resolving hostname "www.accountonline.com" ...
>> IP address is "104.72.140.84"
>> Connecting to "www.accountonline.com"
>> Connected to "www.accountonline.com"
>> Using GnuTLS default ciphers.
>> TLS: SSL-Ciphers negotiated: TLS1.2:ECDHE-RSA-AES-256-GCM:AEAD
>> Connected.
>> Sending message...
>> Message sent.
>> Waiting for response...
>> Receiving response...
>> HTTP-Status: 403 (Forbidden)
>> Unlocking customer "3"
>> 
>> Messages in the OFX.LOG File:
>> 
>> Sending:
>> -------------------------------------
>> OFXHEADER:100
>> DATA:OFXSGML
>> VERSION:102
>> SECURITY:NONE
>> ENCODING:USASCII
>> CHARSET:1252
>> COMPRESSION:NONE
>> OLDFILEUID:NONE
>> NEWFILEUID:20201019151026.000
>> 
>> <OFX>
>> <SIGNONMSGSRQV1>
>> <SONRQ>
>> <DTCLIENT>20201019150941.000
>> <USERID>XXXXXXXX
>> <USERPASS>XXXXXXXXXXXX
>> <LANGUAGE>ENG
>> <FI>
>> <ORG>Citigroup
>> <FID>24909
>> </FI>
>> <APPID>QWIN
>> <APPVER>2200
>> <CLIENTUID>
>> </SONRQ>
>> </SIGNONMSGSRQV1>
>> <CREDITCARDMSGSRQV1>
>> <CCSTMTTRNRQ>
>> <TRNUID>20201019151026.000
>> <CLTCOOKIE>1
>> <CCSTMTRQ>
>> <CCACCTFROM>
>> <ACCTID>XXXXXXXXXXXXXXXX
>> </CCACCTFROM>
>> <INCTRAN>
>> <DTSTART>20201010000000.000
>> <DTEND>20201019000000.000
>> <INCLUDE>Y
>> </INCTRAN>
>> </CCSTMTRQ>
>> </CCSTMTTRNRQ>
>> </CREDITCARDMSGSRQV1>
>> </OFX>
>> 
>> Thank you for any help you might give me.
>> 
>> Dale Franks
>> 
>> Sent from Mail for Windows 10
>> 
>> _______________________________________________
>> gnucash-user mailing list
>> gnucash-user at gnucash.org
>> To update your subscription preferences or to unsubscribe:
>> https://lists.gnucash.org/mailman/listinfo/gnucash-user
>> If you are using Nabble or Gmane, please see https://wiki.gnucash.org/wiki/Mailing_Lists for more information.
>> -----
>> Please remember to CC this list on all your replies.
>> You can do this by using Reply-To-List or Reply-All.
> 
> _______________________________________________
> gnucash-user mailing list
> gnucash-user at gnucash.org
> To update your subscription preferences or to unsubscribe:
> https://lists.gnucash.org/mailman/listinfo/gnucash-user
> If you are using Nabble or Gmane, please see https://wiki.gnucash.org/wiki/Mailing_Lists for more information.
> -----
> Please remember to CC this list on all your replies.
> You can do this by using Reply-To-List or Reply-All.