Kerberos Authentication Fails With ORA-12638 On Windows 2008 R2

(Doc ID 1225063.1)

Last updated on DECEMBER 03, 2017

Applies to:

Advanced Networking Option - Version and later
Information in this document applies to any platform.
***Checked for relevance on 24-Oct-2012***


A client running on Windows 2008 R2 is not able to connect using kerberos.

C:\Users\test>sqlplus /@TEST

SQL*Plus: Release Production on Tue Sep 7 10:07:51 2010

Copyright (c) 1982, 2010, Oracle. All rights reserved.

ORA-12638: Credential retrieval failed

Enter user-name:

This is happening only when SQLNET.KERBEROS5_CC_NAME = OSMSFT://. If the kerberos tickets are requested manually and stored in a file (SQLNET.KERBEROS5_CC_NAME = <file>) everything works as expected. Furthermore the problem cannot be reproduced on Windows 2000 or Windows  2003.


Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms