Unable To Connect Using Kerberos And Windows Stored Ticket

(Doc ID 1062724.1)

Last updated on OCTOBER 24, 2017

Applies to:

Oracle Server - Standard Edition - Version: 10.2.0.1 to 11.1.0.7 - Release: 10.2 to 11.1
Information in this document applies to any platform.

Symptoms

Kerberos authentication based on the ticket obtained automatically when logging  to the domain is failing with the following errors:


d:\oracle\product\10.2.0\db_1\NETWORK\ADMIN>sqlplus /@d1v10204

SQL*Plus: Release 10.2.0.4.0 - Production on Fri Feb 5 07:31:48 2010
Copyright (c) 1982, 2007, Oracle. All Rights Reserved.

ERROR:
ORA-12637: Packet receive failed


The ticket looks OK:

d:\oracle\product\10.2.0\db_1\NETWORK\ADMIN>oklist

Kerberos Utilities for 32-bit Windows: Version 10.2.0.4.0 - Production on 05-FEB-2010 07:31:39
Copyright (c) 1996, 2007 Oracle. All rights reserved.

Ticket cache: win2kcc
Default principal: test_test@ADTEST.RO.ORACLE.COM

Valid Starting Expires Principal
05-Feb-2010 07:05:49 05-Feb-2010 17:05:49 krbtgt/ADTEST.RO.ORACLE.COM@ADTEST.RO.ORACLE.COM renew until 12-Feb-2010 07:05:49
05-Feb-2010 07:06:00 05-Feb-2010 17:05:49 oracle/lap2.adtest.ro.oracle.com@ADTEST.RO.ORACLE.COM renew until 12-Feb-2010 07:05:49

d:\oracle\product\10.2.0\db_1\NETWORK\ADMIN>echo %date% %time%
Fri 02/05/2010 7:37:57.03



This is how sqlnet.ora is configured:

NAMES.DIRECTORY_PATH= (TNSNAMES)
SQLNET.KERBEROS5_CONF = c:\krb5\krb5.conf
SQLNET.KERBEROS5_CONF_MIT=true
SQLNET.AUTHENTICATION_KERBEROS5_SERVICE = oracle
SQLNET.AUTHENTICATION_SERVICES= (KERBEROS5)
SQLNET.KERBEROS5_KEYTAB = c:\krb5\v5srvtab
SQLNET.KERBEROS5_CC_NAME = OSMSFT://


At the same moment with the ORA-12637 error an ORA-7445 is logged in the alert.log:

ORA-07445: exception encountered: core dump [ACCESS_VIOLATION] [unable_to_trans_pc] [PC:0x6096891A] [ADDR:0x30] [UNABLE_TO_READ] []
Current SQL information unavailable - no session.

Functions in the Call Stack Trace for this issue include:

kpkiadef <- xupiini <- xupiah0 <- upiah0 <- kpuatch

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms