My Oracle Support Banner

Kerberos Authenticated Network Connection Fails Because it Cannot Build the Realm (Doc ID 182979.1)

Last updated on JULY 29, 2019

Applies to:

Advanced Networking Option - Version to [Release 9.2 to 11.2]
Oracle Database - Enterprise Edition - Version to [Release 9.2 to 11.2]
Information in this document applies to any platform.
Checked for relevance on 11-Jun-2013


Kerberos authenticated network connection fails with  TNS-12638 / ORA-12638: Credential retrieval failed.

Client sqlnet trace shows the failure occurs building server principal with the error "Unable to get locate hosts realm"


CHANGE NOTE: Use level 16 client network trace. The failure occurs at  function nauk5lu_get_host_realm. Further down in the trace there is a message  stating "Couldn't build server principal".


To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.