ORA-28058: SQL Developer Login Failure When Using 'Proxy User' Tab And 'Proxy Only Connect' Is Set
(Doc ID 2703100.1)
Last updated on OCTOBER 17, 2022
Applies to:
Oracle SQL Developer - Version 19.1 and laterInformation in this document applies to any platform.
Symptoms
On : SQL Developer 19.x version
When trying to set up a proxy connection using the Proxy User tab, you are encountering the following error if 'Proxy Only Connect' is set on the account:
If you do not use the Proxy User tab, but instead put <username>[<proxy>] in the primary tab, it authenticates correctly.
If you disable 'Proxy Only Connect', but leave the proxy permissions in place, then the Proxy User tab is able to establish the proxy connection.
Steps To Reproduce
1. Create user.
SQL> create user <db_user> identified by "<password>";
User created.
SQL> grant connect, resource to <db_user>;
Grant succeeded.
2. Test from SQL Developer using basic connection:
Login as <db_user> to the database is successful, as seen here:
3. Create proxy user.
SQL> create user <proxy_user> identified by "<proxy_password>";
User created.
SQL> grant connect, resource to <proxy_user>;
Grant succeeded.
SQL> alter user <proxy_user> grant connect through <db_user>;
User altered.
4. Test proxy user from SQL Developer.
SQL Developer:
User Info tab:
Username: <db_user>[<proxy_user>]
Password: <password>
SQL Developer:
User Info tab:
Username: <db_user>
Password: <password>
Proxy User tab:
Username: <proxy_user>
Password: <leave blank>
Test connection works, as seen here:
5. Make it "only connect".
SQL> alter user <proxy_user> proxy only connect;
User altered.
SQL Developer:
User Info tab:
Username: <db_user>
Password: <password>
Proxy User tab:
Username: <proxy_user>
Password: <leave blank>
Now Test connect fails with error: "Status : Failure -Test failed: ORA-28058: login is allowed only through a proxy", as seen here:
6. At this point, you can login as <db_user> and proxy to <proxy_user> successfully only by specifying <db_user>[<proxy_user>] on the User Info tab.
Filling out the proxy tab gives the ORA-28058 error.
7. It will work again if you reverse the "only connect".
SQL> alter user proxy_user cancel proxy only connect;
User altered.
And now you are back to being able to connect via proxy either way successfully (like in images in step 4 above).
Changes
You are trying to set up a proxy connection.
Cause
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |
In this Document
Symptoms |
Changes |
Cause |
Solution |
References |