Pds and gatekeeper are running, there are no errors or any messages in the docker log of the gate keeper until an authentication is attempted. 2FA can both be enabled and disabled from bsky web, including entering the code sent to my mail for disabling it.
What works:
- Login & Logout with 2FA disabled
- enabling 2FA
- disabling 2FA + receiving code via email.
What does not work:
- login with 2FA enabled, see error below
Gatekeeper Logs:
bsky-gatekeeper | 2025-10-16T23:51:35.555724Z ERROR pds_gatekeeper::helpers: Error sending the 2FA email: internal client error: No compatible authentication mechanism was found
bsky-gatekeeper | 2025-10-16T23:51:35.555775Z ERROR pds_gatekeeper::xrpc::com_atproto_server: Error during pre-auth check. This happens on the create_session endpoint when trying to decide if the user has access:
bsky-gatekeeper | internal client error: No compatible authentication mechanism was found
Hey I’m sorry I missed this. @fry69.dev hit a similar issue and pinged me. Their solution was for postfix and to set the ?tls=required at the end of the PDS smtp url. May try that. Which email provider are you using?
A thread talking about it a bit
https://bsky.app/profile/baileytownsend.dev/post/3m5o2ypt3hk2q
Here’s a list of different configurations to try https://docs.rs/lettre/latest/lettre/transport/smtp/struct.AsyncSmtpTransport.html#method.from_url