My Oracle Support Banner

Connecting using password authentication fails with the error "ORA-12687: Credentials Expired" with Kerberos configured (Doc ID 2590158.1)

Last updated on SEPTEMBER 25, 2019

Applies to:

Oracle Database - Enterprise Edition - Version and later
Information in this document applies to any platform.


When trying to connect using password authentication with the kerberos already configured and enabled, then the password authentication fails with the below error.

[oracle@<target_db_hotsname>]$ rman target / catalog=rman/rman@"(DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=<hostname>)(PORT=1521))(CONNECT_DATA=(SID=<sid>)))"

Recovery Manager: Release - Production on Mon Sep 16 16:48:40 2019

Copyright (c) 1982, 2014, Oracle and/or its affiliates. All rights reserved.

connected to target database: <DB name> (DBID=<DB id>)
RMAN-00571: ===========================================================
RMAN-00569: =============== ERROR MESSAGE STACK FOLLOWS ===============
RMAN-00571: ===========================================================
RMAN-00554: initialization of internal recovery manager package failed
RMAN-04004: error from recovery catalog database: ORA-12687: Credentials expired.


[oracle@<target_db_hotsname>]$ sqlplus rman/<password>@<RMANCAT_DB>

SQL*Plus: Release Production on Mon Sep 16 15:14:56 2019

Copyright (c) 1982, 2014, Oracle. All rights reserved.

ORA-12687: Credentials expired.


To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.