Sqlplus Aborting When Authenticating With A Kerberos User using UPN Suffixes

(Doc ID 351250.1)

Last updated on OCTOBER 04, 2010

Applies to:

Advanced Networking Option - Version: 10.2.0 and later   [Release: and later ]
Information in this document applies to any platform.
Checked for relevance on 04-Oct-2010

Symptoms

Sqlplus aborts without error when trying to connect as a Kerberos authenticated user from a Windows client.



Changes

This occurs when attempting to use the internal credentials cache for a Windows Domain user when the user has connected using a UPN Suffix rather than a normal domain login.

 

When this occurs the user will specify the UPN Suffix when the log into the client machine. For example,

 

User - adam@testsuffix

Domain - this is left blank

 

This generates an extra component in the credentials as displayed with kerbtray.exe - For example,

adam@testsuffix@MYREALM

 

compared to a normal domain login which would generate a credential,

 

adam@MYREALM

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms