Windows: Connections Fail with ORA-12640 or ORA-21561 (Doc ID 744125.1)

Last updated on OCTOBER 27, 2016

Applies to:

Oracle Net Services - Version 10.2.0.1 to 12.1.0.1 [Release 10.2 to 12.1]
Oracle Database - Enterprise Edition - Version 11.2.0.1 to 12.1.0.2 [Release 11.2 to 12.1]
Generic Windows
***Checked for relevance on 29-JAN-2014***

Symptoms

Connections to database fail, reporting the error code ORA-12640 Authentication adapter initialization failed. SQLNET.AUTHENTICATION_SERVICES is set to NTS in the SQLNET.ORA file. Changing SQLNET.AUTHENTICATION_SERVICES=NONE and connections then fail with the error code ORA-21561 OID generation failed.

Seen for connections using third party applications and oracle tools such as recovery manager (RMAN). Connections have also been reported to be restricted to 64.

A typical Oracle Net level 16 client trace of RMAN failure shows following:

[21-JAN-2010 10:14:55:097] nsc2addr: (DESCRIPTION=(ADDRESS=(PROTOCOL=BEQ)(PROGRAM=oracle)(ARGV0=oracleBOXIDB)(ARGS='(DESCRIPTION=(LOCAL=YES)(ADDRESS=(PROTOCOL=beq)))'))(CONNECT_DATA=(SID=ORCL)(CID=(PROGRAM=C:\oracle\ora102\bin\rman.exe)(HOST=sample.com)(USER=scott))))

o Connect packet :

[21-JAN-2010 10:14:55:097] nscon: sending NSPTCN packet

o Accept packet :

[21-JAN-2010 10:14:55:097] nscon: got NSPTAC packet

o shortly after the accept packet and client authentication :

[21-JAN-2010 10:14:55:129] nau_gse: failed with error 12640
[21-JAN-2010 10:14:55:129] nau_gse: exit
[21-JAN-2010 10:14:55:129] nau_cga: failed with error 12640
[21-JAN-2010 10:14:55:129] nau_cga: exit
[21-JAN-2010 10:14:55:129] nau_ccn: failed with error 12640
[21-JAN-2010 10:14:55:129] nacomsd: entry
[21-JAN-2010 10:14:55:129] nacomfsd: entry
[21-JAN-2010 10:14:55:129] nacomfsd: exit
[21-JAN-2010 10:14:55:129] nacomsd: exit
[21-JAN-2010 10:14:55:129] nau_ccn: exit
[21-JAN-2010 10:14:55:129] na_csrd: failed with error 12640
[21-JAN-2010 10:14:55:129] na_csrd: exit
[21-JAN-2010 10:14:55:129] nacomer: error 12640 received from authentication service

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms