ORA-12504 with Tenable Security Center connections, yet SQL*Plus and JDBC Clients are successful with the same credentials (Doc ID 2430495.1)

Last updated on AUGUST 01, 2018

Applies to:

Symptoms

You may find that a 3rd party program / application "Tenable Security Center" cannot seem to connect to your 12.2 Database through the SCAN Listener.
However, connections using SQL*Net and JDBC with the same credentials, connects perfectly.

* Source is "Tenable Security Center"
* Target is 12.2, Grid SCAN Listener.

This is the Tenable error :

==========================================================================================
(Default): AUDIT_ERROR_DB_CONNECTION: an error happened while connecting to the database
(DESCRIPTION=(TMP=)(VSNNUM=203424000)(ERR=12504)(ERROR_STACK=(ERROR=(CODE=12504)(EMFI=4))(ERROR=(CODE=12504)(EMFI=4))
==========================================================================================

As an example, the connection data for Tenable is :

* the username (same as the SQL*Plus and JDBC one)
* password (same as the SQL*Plus and JDBC one)
* the SCAN Host (SCAN1.ORACLE.COM), and the Port (1523), and
* the SID (ORCL1).

SQL*Plus examples that work:
sqlplus user/pwd@'(description = (address = (protocol = TCP)(Host = SCAN1.ORACLE.COM)(port = 1523))(connect_data = (server = dedicated)(service_name = ORCL)))
sqlplus user/pwd@'(description = (address = (protocol = TCP)(Host = SCAN1.ORACLE.COM)(port = 1523))(connect_data = (server = dedicated)(sid = ORCL1)))
sqlplus user/pwd@SCAN1.ORACLE.COM:1523/ORCL

Cause