My Oracle Support Banner

ORA-28058: SQL Developer Login Failure When Using 'Proxy User' Tab And 'Proxy Only Connect' Is Set (Doc ID 2703100.1)

Last updated on AUGUST 25, 2020

Applies to:

Oracle SQL Developer - Version 19.1 and later
Information in this document applies to any platform.

Symptoms

On : SQL Developer 19.x version

When trying to set up a proxy connection using the Proxy User tab, you are encountering the following error if 'Proxy Only Connect' is set on the account:

"Status : Failure -Test failed: ORA-28058: login is allowed only through a proxy"

If you do not use the Proxy User tab, but instead put <username>[<proxy>] in the primary tab, it authenticates correctly.

If you disable 'Proxy Only Connect', but leave the proxy permissions in place, then the Proxy User tab is able to establish the proxy connection.

Steps To Reproduce

1. Create user.

SQL> create user <db_user> identified by "<password>";

User created.

SQL> grant connect, resource to <db_user>;

Grant succeeded.

2. Test from SQL Developer using basic connection:

 Login as <db_user> to the database is successful, as seen here:
 

3. Create proxy user.

SQL> create user <proxy_user> identified by "<proxy_password>";

User created.

SQL> grant connect, resource to <proxy_user>;

Grant succeeded.

SQL> alter user <proxy_user> grant connect through <db_user>;

User altered.

4. Test proxy user from SQL Developer.

SQL Developer:
User Info tab:
Username: <db_user>[<proxy_user>]
Password: <password>

SQL Developer:
User Info tab:
Username: <db_user>
Password: <password>

Proxy User tab:
Username: <proxy_user>
Password: <leave blank>

Test connection works, as seen here:


5. Make it "only connect".

SQL> alter user <proxy_user> proxy only connect;
User altered.

SQL Developer:
User Info tab:
Username: <db_user>
Password: <password>

Proxy User tab:
Username: <proxy_user>
Password: <leave blank>

Now Test connect fails with error: "Status : Failure -Test failed: ORA-28058: login is allowed only through a proxy", as seen here:

6. At this point, you can login as <db_user> and proxy to <proxy_user> successfully only by specifying <db_user>[<proxy_user>] on the User Info tab.
    Filling out the proxy tab gives the ORA-28058 error.

7. It will work again if you reverse the "only connect".

SQL> alter user proxy_user cancel proxy only connect;

User altered.

And now you are back to being able to connect via proxy either way successfully (like in images in step 4 above). 

Changes

 You are trying to set up a proxy connection.

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Changes
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.