My Oracle Support Banner

Expired User Connection From 11.1.0.7 Client to 12.2.0.1 DB with April 2018 PSU and above, Fails ora-28041 : Authentication protocol internal error (Doc ID 2499040.1)

Last updated on AUGUST 17, 2020

Applies to:

Oracle Database - Enterprise Edition - Version 12.2.0.1 and later
Information in this document applies to any platform.

Symptoms

Expired user accounts can't change password and connect from 11.1.0.7 client to 12.2.0.1 DB+April2018PSU, failing with error 'ORA-28041: Authentication protocol internal error'. There is no issue with open user accounts connecting from 11.1.0.7 client to 12.2.0.1 DB+April2018PSU.

Also the expired user account connections from 11.1.0.7 client to 12.2.0.1DB+Jan2018PSU works fine. The issue started only after applying April 2018 PSU patch on DB server.

From Forms 11.1.2.2 and the SQLPLUS 11.1.0.7 that comes with Forms 11.1.2.2, expired user connections fail with below message:

ERROR:
ORA-28041: Authentication protocol internal error

Changes

 Test case:
++++++++

1) In 12.2.0.1 database+April2018PSU, create user and expire the account.
create user <username> identified by <password>;
alter user <username> password expire;

2) In 11.1.0.7 client, setup the tnsnames.ora to connect to the 12.2.0.1 database

3) Check if the entry in the tnsnames.ora is correct using tnsping in 11.1.0.7 client
tnsping <TNS_ALIAS>

4) Now connect to 12.2.0.1 database using 11.1.0.7 client.
sqlplus <username>/<password>@<TNS_ALIAS>
ERROR:
ORA-28001: the password has expired

Changing password for <username>
New password:
Retype new password:
ERROR:
ORA-28041: Authentication protocol internal error
Password unchanged

Expected behavior:
++++++++++++++++++++
connect to 12.2.0.1 database using 11.1.0.7 client.
sqlplus <username>/<password>@<TNS_ALIAS>
ERROR:
ORA-28001: the password has expired

Changing password for <username>
New password:
Retype new password:
Password changed

Connected to:
Oracle Database 12c Enterprise Edition Release 12.2.0.1 - 64bit Production
With the Partitioning, Data Mining and Real Application Testing options

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Changes
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.