JDBC - java.sql.SQLRecoverableException: IO Error: The service in process is not supported. Operation unavailable (Mechanism level: KRB_CRED not generated correctly.) (Doc ID 2896105.1)

Last updated on SEPTEMBER 19, 2022

Applies to:

Symptoms

JDBC connection requiring Kerberos authentication works with Java 8 and fails with Java 10  and 11.

The issue was initially found in Java 8 with the connection attempt resulting in Protocol Violation and TNS-12631.    
This was resolved with a workaround of removing the parameter "forwardable=true" from the krb.conf.  
However, this does not work with Java 10 and 11.

Exception stack

java.sql.SQLRecoverableException: IO Error: The service in process is not supported. Operation unavailable
(Mechanism level: KRB_CRED not generated correctly.)
       at oracle.jdbc.driver.T4CConnection.logon(T4CConnection.java:858)
       at oracle.jdbc.driver.PhysicalConnection.connect(PhysicalConnection.java:793)
       at oracle.jdbc.driver.T4CDriverExtension.getConnection(T4CDriverExtension.java:57)
       at oracle.jdbc.driver.OracleDriver.connect(OracleDriver.java:747)
       at oracle.jdbc.driver.OracleDriver.connect(OracleDriver.java:562)
       at java.sql/java.sql.DriverManager.getConnection(Unknown Source)
       at java.sql/java.sql.DriverManager.getConnection(Unknown Source)
       :::::::::::::::

To reproduce this issue, run Kerberos authentication test with JDK9 or above and set the forwardable value to 'false' in Kerberos configuration.

Changes

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.