19c:KERBEROS CONNECTION FAILS WITH ORA-12631: USERNAME RETRIEVAL FAILED
(Doc ID 2914896.1)
Last updated on APRIL 17, 2023
Applies to:
Oracle Database - Enterprise Edition - Version 19.11.0.0.0 to 19.16.0.0.0 [Release 19]Information in this document applies to any platform.
Symptoms
A fresh setup of Kerberos authentication fails with ORA-12631: Username retrieval failed despite having valid TGT & TGS. All the configuration appears to be correct.
krb5_trace of the connection attempt from the db server ends abruptly as shown in the below trace
export KRB5_TRACE=/any_location/krb5trace_290822.trc
echo $KRB5_TRACE
/any_location/krb5trace_290822.trc
okinit
oklist
sqlplus /@orcl
krb5trace_290822.trc
##############
[2681668] 1662517096.352915: TGS request result: 0/Success
[2681668] 1662517096.352916: Received creds for desired service service_name
[2681668] 1662517096.352917: Storing XXXX -> XXXXX in FILE:/tmp/krb5cc_5000
[2681668] 1662517096.352918: Creating authenticator for XXXXXXXX-> XXXX, seqnum 0, subkey(null), session key rc4-hmac/CA5C <<< ends abruptly
Changes
Setting up CMU authenticated kerberos user
Cause
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |
In this Document
| Symptoms |
| Changes |
| Cause |
| Solution |
| References |