My Oracle Support Banner

Connecting using password authentication fails with the error "ORA-12687: Credentials Expired" with Kerberos configured (Doc ID 2590158.1)

Last updated on SEPTEMBER 25, 2019

Applies to:

Oracle Database - Enterprise Edition - Version 12.1.0.1 and later
Information in this document applies to any platform.

Symptoms

When trying to connect using password authentication with the kerberos already configured and enabled, then the password authentication fails with the below error.

[oracle@<target_db_hotsname>]$ rman target / catalog=rman/rman@"(DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=<hostname>)(PORT=1521))(CONNECT_DATA=(SID=<sid>)))"

Recovery Manager: Release 12.1.0.2.0 - Production on Mon Sep 16 16:48:40 2019

Copyright (c) 1982, 2014, Oracle and/or its affiliates. All rights reserved.

connected to target database: <DB name> (DBID=<DB id>)
RMAN-00571: ===========================================================
RMAN-00569: =============== ERROR MESSAGE STACK FOLLOWS ===============
RMAN-00571: ===========================================================
RMAN-00554: initialization of internal recovery manager package failed
RMAN-04004: error from recovery catalog database: ORA-12687: Credentials expired.

or

[oracle@<target_db_hotsname>]$ sqlplus rman/<password>@<RMANCAT_DB>

SQL*Plus: Release 12.1.0.2.0 Production on Mon Sep 16 15:14:56 2019

Copyright (c) 1982, 2014, Oracle. All rights reserved.

ERROR:
ORA-12687: Credentials expired.

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.