My Oracle Support Banner

TNS-12638 / ORA-12638 When Using Password Authentication On Kerberos Setup (Doc ID 972896.1)

Last updated on APRIL 12, 2019

Applies to:

Advanced Networking Option - Version and later
Information in this document applies to any platform.


You are unable to make a database authentication on the server where  kerberos is configured for the clients.

You have configured the sqlnet.ora to accept  kerberos along with database authentication.

The client sqlnet trace will show:

nau_fme: unable to locate authentication adapter "beq" in adapter list
nau_rsp: exit
nau_rsp: entry
nau_fme: unable to locate authentication adapter "none" in adapter list
nau_css: client sending adapter - type: auth. service name: KERBEROS5
snauk5g_open_file: Setting read lock.
snauk5g_open_file: Opening /tmp/krb5cc_801.
snauk5g_open_file: open failed with 2: File permissions incorrect
snauk5g_open_file: Returning 203: File not found
snauk5g_open_file: exit
nauk5b1_fcc_open_file: Open failed.
nauk5b1_fcc_open_file: Returning 203: File not found
nauk5b1_fcc_open_file: exit
nauk5bz_fcc_close_file: entry
nauk5bz_fcc_close_file: Returning 129: Internal file credentials cache error
nauk5bz_fcc_close_file: exit
nauk5ahgetcontext: entry
nauk5ahgetcontext: Using default context.
nauk5ahgetcontext: exit
nauk5a0sendclientauth: Couldn't get service credentials.
snaumfhi_freehostinfo: entry
snaumfhi_freehostinfo: exit
nauk5a0sendclientauth: failed
nauk5a0sendclientauth: exit
nauk5aauthent: failed
nauk5aauthent: exit
nau_ccn: get credentials function failed
nau_ccn: failed with error 12638


To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.