My Oracle Support Banner

Kerberos Constraint Delegation Fails with ORA-12638 On Linux Platform (Doc ID 2421596.1)

Last updated on SEPTEMBER 14, 2021

Applies to:

Advanced Networking Option - Version 11.2.0.4 and later
Information in this document applies to any platform.

Symptoms

Kerberos Constrained Delegation with the latest version of Oracle OCI on Linux fails with "ORA-12638: Credential retrieval failed".

Changes

Kerberos authentication works fine for single hop but when double hop (delegation) is configured it (call to OCIServerAttach) fails with "ORA-12638: Credential retrieval failed".

NOTE: The constrained delegation works fine on Windows.

 

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document
Symptoms
Changes
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.