11.2.0.2 and 11.2.0.3 JDBC Thin Driver Cannot Connect Using Kerberos With Windows Native Cache (Doc ID 1504800.1)

Last updated on MARCH 08, 2017

Applies to:

JDBC - Version 11.2.0.2.0 to 11.2.0.3.0 [Release 11.2]
Information in this document applies to any platform.

Symptoms

Kerberos authentication with the 11.2.0.2 or 11.2.0.3 JDBC thin driver, using Windows Native Cache with delegation enabled, fails with the following error:

java.sql.SQLException: IO Error: The service in process is not supported.
  at oracle.jdbc.driver.T4CConnection.logon(T4CConnection.java:458)
  at oracle.jdbc.driver.PhysicalConnection.(PhysicalConnection.java:546)
  at oracle.jdbc.driver.T4CConnection.(T4CConnection.java:236)
  at oracle.jdbc.driver.T4CDriverExtension.getConnection(T4CDriverExtension.java:32)
  at oracle.jdbc.driver.OracleDriver.connect(OracleDriver.java:521)
  ...
Caused by: oracle.net.ns.NetException: The service in process is not supported.
  at oracle.net.ano.AuthenticationService.h(Unknown Source)
  at oracle.net.ano.Ano.negotiation(Unknown Source)
  at oracle.net.ns.NSProtocol.connect(NSProtocol.java:439)
  at oracle.jdbc.driver.T4CConnection.connect(T4CConnection.java:1102)
  at oracle.jdbc.driver.T4CConnection.logon(T4CConnection.java:320)
  ... 36 more
Caused by: java.security.PrivilegedActionException: KrbException:
EncryptedData is encrypted using keytype RC4 with HMAC but decryption key is of type NULL
  at java.security.AccessController.doPrivileged(Native Method)
  at javax.security.auth.Subject.doAs(Unknown Source)
  ... 41 more
Caused by: KrbException: EncryptedData is encrypted using keytype RC4 with HMAC but decryption key is of type NULL
  at sun.security.krb5.EncryptedData.decrypt(Unknown Source)
  at oracle.net.ano.AuthenticationService.a(Unknown Source)
  at oracle.net.ano.AuthenticationService.run(Unknown Source)
  ... 43 more


File cache works fine with 11.2.0.3 driver.

With version 11.2.0.1 of the JDBC driver, both file cache and windows native cache work fine.
Similarly, the problem does not reproduce with the 11.1.0.6 or 11.1.0.7 JDBC driver.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms