My Oracle Support Banner

ORA-12638 When Using Password Authenticated Database Links Between Databases Configured For Kerberos Authentication (Doc ID 1559760.1)

Last updated on MARCH 07, 2019

Applies to:

Advanced Networking Option - Version to [Release 11.2]
Information in this document applies to any platform.


When using a normal password authenticated database link between databases which have been configured to allow Kerberos authentication, then this can fail with ORA-12638.

This applies both where the session using the database link is password authenticated, and also where they are kerberos authenticated.


In the alert.log of the database you will observe errors similar to this:


        TNS for Linux: Version - Production
        Oracle Bequeath NT Protocol Adapter for Linux: Version - Production
        TCP/IP NT Protocol Adapter for Linux: Version - Production
  Time: 29-APR-2015 16:56:05
  Tracing not turned on.
  Tns error struct:
    ns main err code: 12638

TNS-12638: Credential retrieval failed
    ns secondary err code: 0
    nt main err code: 0
    nt secondary err code: 0
    nt OS err code: 0





To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.