Skip to Main Content

Oracle Database Discussions

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

Interested in getting your voice heard by members of the Developer Marketing team at Oracle? Check out this post for AppDev or this post for AI focus group information.

ORA-12638 and kerberos authentication

evgeni gelfandAug 27 2018 — edited Aug 31 2018

Hi all.

I have, probably trivial, issue.

11.2.0.4 with October 2017 PSU.  Linux 6 , kerberos 5

I am trying to setup up mixed authentication (different database users will use different authentication mechanism)

i.e. partially users will use kerberos authentication and partially password base.

1. When use SQLNET.AUTHENTICATION_SERVICES= (BEQ, TCP, KERBEROS5)  (both client and server side)

    And client not obtain kerberos tickets ---> can't use password authentication. error: ORA-12638

    Once kinit running the connection is successful.

I've set SQLNET.FALLBACK_AUTHENTICATION = TRUE, as per note (972896.1)

As well SQLNET.AUTHENTICATION_SERVICES= (NONE,KERBEROS5,BEQ,TCP)

No success.

2. When use: SQLNET.AUTHENTICATION_SERVICES= (NONE) (client side)

  I, obviously, can't use kerberos authentication but success to connect using password.

Please correct me if I am wrong but I think there is should be no issue to have such kind of mixed authentication, some clients use kerberos some others use password based. Whoever use kerberos run kinit to obtain tickets, whoever use password don't.

Thanks
Evgeni

This post has been answered by evgeni gelfand on Aug 30 2018
Jump to Answer

Comments

Locked Post
New comments cannot be posted to this locked post.

Post Details

Locked on Sep 27 2018
Added on Aug 27 2018
3 comments
650 views