Kerberos Authentication Fails With ORA-12638 On Windows 2008 R2

(Doc ID 1225063.1)

Last updated on DECEMBER 03, 2017

Applies to:

Advanced Networking Option - Version 11.2.0.1 and later
Information in this document applies to any platform.
***Checked for relevance on 24-Oct-2012***

Symptoms

A 11.2.0.1 client running on Windows 2008 R2 is not able to connect using kerberos.


C:\Users\test>sqlplus /@TEST

SQL*Plus: Release 11.2.0.1.0 Production on Tue Sep 7 10:07:51 2010

Copyright (c) 1982, 2010, Oracle. All rights reserved.

ERROR:
ORA-12638: Credential retrieval failed


Enter user-name:





This is happening only when SQLNET.KERBEROS5_CC_NAME = OSMSFT://. If the kerberos tickets are requested manually and stored in a file (SQLNET.KERBEROS5_CC_NAME = <file>) everything works as expected. Furthermore the problem cannot be reproduced on Windows 2000 or Windows  2003.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms