My Oracle Support Banner

Kerberos Authentication Fails With ORA-12638 On Windows 2008 R2 (Doc ID 1225063.1)

Last updated on JANUARY 02, 2020

Applies to:

Advanced Networking Option - Version and later
Information in this document applies to any platform.
***Checked for relevance on 24-Oct-2012***


A client running on Windows 2008 R2 is not able to connect using kerberos.

C:\Users\test>sqlplus /@TEST

SQL*Plus: Release Production on Tue Sep 7 10:07:51 2010

Copyright (c) 1982, 2010, Oracle. All rights reserved.

ORA-12638: Credential retrieval failed

Enter user-name:

This is happening only when SQLNET.KERBEROS5_CC_NAME = OSMSFT://. If the kerberos tickets are requested manually and stored in a file (SQLNET.KERBEROS5_CC_NAME = <file>) everything works as expected. Furthermore the problem cannot be reproduced on Windows 2000 or Windows  2003.


To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.