My Oracle Support Banner

Kerberos Authentication Fails With ORA-12638 On Windows 2008 R2 (Doc ID 1225063.1)

Last updated on JANUARY 02, 2020

Applies to:

Advanced Networking Option - Version 11.2.0.1 and later
Information in this document applies to any platform.
***Checked for relevance on 24-Oct-2012***

Symptoms

A 11.2.0.1 client running on Windows 2008 R2 is not able to connect using kerberos.


C:\Users\test>sqlplus /@TEST

SQL*Plus: Release 11.2.0.1.0 Production on Tue Sep 7 10:07:51 2010

Copyright (c) 1982, 2010, Oracle. All rights reserved.

ERROR:
ORA-12638: Credential retrieval failed


Enter user-name:





This is happening only when SQLNET.KERBEROS5_CC_NAME = OSMSFT://. If the kerberos tickets are requested manually and stored in a file (SQLNET.KERBEROS5_CC_NAME = <file>) everything works as expected. Furthermore the problem cannot be reproduced on Windows 2000 or Windows  2003.

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Cause
Solution


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.