TNS-12638 / ORA-12638 When Using Password Authentication On Kerberos Setup

(Doc ID 972896.1)

Last updated on NOVEMBER 21, 2017

Applies to:

Advanced Networking Option - Version 10.2.0.1 and later
Information in this document applies to any platform.
***Checked for relevance on 20-SEP-2012***

Symptoms

You are unable to make a database authentication on the server where  kerberos is configured for the clients.

You have configured the sqlnet.ora to accept  kerberos along with database authentication.
SQLNET.AUTHENTICATION_SERVICES = (beq,none,kerberos5)

The client sqlnet trace will show:

nau_fme: unable to locate authentication adapter "beq" in adapter list
nau_rsp: exit
nau_rsp: entry
nau_fme: unable to locate authentication adapter "none" in adapter list
...
nau_css: client sending adapter - type: auth. service name: KERBEROS5
...
snauk5g_open_file: Setting read lock.
snauk5g_open_file: Opening /tmp/krb5cc_801.
snauk5g_open_file: open failed with 2: File permissions incorrect
snauk5g_open_file: Returning 203: File not found
snauk5g_open_file: exit
nauk5b1_fcc_open_file: Open failed.
nauk5b1_fcc_open_file: Returning 203: File not found
nauk5b1_fcc_open_file: exit
nauk5bz_fcc_close_file: entry
nauk5bz_fcc_close_file: Returning 129: Internal file credentials cache error
nauk5bz_fcc_close_file: exit
nauk5ahgetcontext: entry
nauk5ahgetcontext: Using default context.
nauk5ahgetcontext: exit
NAUK5C_CC_GET_PRINCIPAL: NAUK5C_CC_GET_PRINCIPAL: File not found
...
nauk5a0sendclientauth: Couldn't get service credentials.
snaumfhi_freehostinfo: entry
snaumfhi_freehostinfo: exit
nauk5a0sendclientauth: failed
nauk5a0sendclientauth: exit
nauk5aauthent: failed
nauk5aauthent: exit
nau_ccn: get credentials function failed
nau_ccn: failed with error 12638

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms