Kerberos Authentication Fails With ORA-12638 on Win 2008 and Equivalent Environment If Using Windows Client Cache (Doc ID 1438762.1)

Last updated on MAY 21, 2015

Applies to:

Advanced Networking Option - Version 11.2.0.2 and later
Information in this document applies to any platform.

Symptoms

This problem appears on Windows 2008 environment: both the AD and the client workstation must use this release and when the client cache is set to OSMSFT:
SQLNET.KERBEROS5_CC_NAME=OSMSFT://
Authentication crashes with ORA-12638 and the client sqlnet trace file shows:

snauk5cw_oscc_get_principal:Returning 204: File permissions incorrect
snauk5cw_oscc_get_principal:exit
nauk5ahgetcontext:entry
nauk5ahgetcontext:Using default context.
nauk5ahgetcontext:exit
NAUK5C_CC_GET_PRINCIPAL:NAUK5C_CC_GET_PRINCIPAL: File permissions incorrect

alternatively:

snauk5cw_get_tkt: Returning 204: File permissions incorrect
snauk5cw_get_tkt: exit
snauk5cw_oscc_retrieve: Returning 204: File permissions incorrect
snauk5cw_oscc_retrieve: exit
nauk5ahgetcontext: entry
nauk5ahgetcontext: Using default context.
nauk5ahgetcontext: exit
nauk5kt_get_credentials: nauk5kt_get_credentials: File permissions incorrect

 

Changes

This problem appears only on 100% Windows 2008 environment (or higher).

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms