Home » RDBMS Server » Networking and Gateways » ORA-01017 OS Authentication Fails (11.2.0.4, windows server 2012 r2)
ORA-01017 OS Authentication Fails [message #645484] Mon, 07 December 2015 08:38 Go to next message
juniordbanewbie
Messages: 250
Registered: April 2014
Senior Member
Dear all,

first I installed 32 bit 11.2.0.4 client. Next I installed Database binaries.

I've encounter these problems while installing the binaries and creating database from oracle universal installer,

ora-12638 credential retrieval failed

In the end binaries are installed but database is not created.

so I changed SQLNET.AUTHENTICATION_SERVICES = (NTS) to SQLNET.AUTHENTICATION_SERVICES = (NONE)

I reinvoke DBCA again, this time database is created.

but i cannot connect through OS authtication

C:\Users\olaf>sqlplus / as sysdba

SQL*Plus: Release 11.2.0.4.0 Production on Mo Dez 7 05:37:56 2015

Copyright (c) 1982, 2013, Oracle.  All rights reserved.

ERROR:
ORA-01017: Benutzername/Kennwort ungĀ³ltig; Anmeldung abgelehnt




while I can connect using remote passwordfile


C:\Users\olaf>sqlplus sys/******@orcl as sysdba

SQL*Plus: Release 11.2.0.4.0 Production on Mo Dez 7 07:59:05 201

Copyright (c) 1982, 2013, Oracle.  All rights reserved.


Verbunden mit:
Oracle Database 11g Release 11.2.0.4.0 - 64bit Production

SYS@orcl>


I've check that I'm in the ORA_DBA group


C:\Users\olaf>NET LOCALGROUP ORA_DBA
Alias name     ORA_DBA
Comment        Oracle DBA Group

Members

----------------------------------------
camden\olaf
NT AUTHORITY\SYSTEM
The command completed successfully.


I've also checked that the %PATH% parameter place Oracle DB Home first before the client home


the closest post I came across is this https://community.oracle.com/thread/3540848

unfortunately my situation is even worse

any help rendered is really appreciated!

thanks and many thanks!

[Updated on: Mon, 07 December 2015 08:50]

Report message to a moderator

Re: ORA-01017 OS Authentication Fails [message #645486 is a reply to message #645484] Mon, 07 December 2015 08:43 Go to previous messageGo to next message
BlackSwan
Messages: 26766
Registered: January 2009
Location: SoCal
Senior Member
>so I changed SQLNET.AUTHENTICATION_SERVICES = (NTS) to SQLNET.AUTHENTICATION_SERVICES = (NONE)
needs to be like below
SQLNET.AUTHENTICATION_SERVICES = (NTS)
Re: ORA-01017 OS Authentication Fails [message #645487 is a reply to message #645486] Mon, 07 December 2015 08:52 Go to previous messageGo to next message
juniordbanewbie
Messages: 250
Registered: April 2014
Senior Member
if i changed back as what u said, I will still not able to login although with another error.
Re: ORA-01017 OS Authentication Fails [message #645489 is a reply to message #645487] Mon, 07 December 2015 08:58 Go to previous messageGo to next message
gazzag
Messages: 1107
Registered: November 2010
Location: Bedwas, UK
Senior Member
And the error is?
Re: ORA-01017 OS Authentication Fails [message #645490 is a reply to message #645489] Mon, 07 December 2015 09:02 Go to previous messageGo to next message
BlackSwan
Messages: 26766
Registered: January 2009
Location: SoCal
Senior Member
>first I installed 32 bit 11.2.0.4 client. Next I installed Database binaries.
can confuse Windows, since V11 DB is only 64-bit.
We can't change problems made by you, Micro$oft, or Oracle.
Re: ORA-01017 OS Authentication Fails [message #645492 is a reply to message #645489] Mon, 07 December 2015 09:09 Go to previous messageGo to next message
juniordbanewbie
Messages: 250
Registered: April 2014
Senior Member

C:\Users\olaf>sqlplus / as sysdba

SQL*Plus: Release 11.2.0.4.0 Production on Mo Dez 7 16:02:06 2015

Copyright (c) 1982, 2013, Oracle.  All rights reserved.

ERROR:
ORA-12638: Abrufen der Zugangsdaten nicht erfolgreich


Benutzernamen eingeben:


can't do login using remote password file also

C:\Users\olaf>sqlplus sys/********@orcl as sysdba

SQL*Plus: Release 11.2.0.4.0 Production on Mo Dez 7 16:03:19 2015

Copyright (c) 1982, 2013, Oracle.  All rights reserved.

ERROR:
ORA-12638: Abrufen der Zugangsdaten nicht erfolgreich


Benutzernamen eingeben:

Re: ORA-01017 OS Authentication Fails [message #645495 is a reply to message #645492] Mon, 07 December 2015 09:14 Go to previous messageGo to next message
Michel Cadot
Messages: 68264
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator

ORA-12638: Credential retrieval failed
 *Cause:  The authentication service failed to retrieve the credentials of a
          user.
 *Action: Enable tracing to determine the exact error.
Re: ORA-01017 OS Authentication Fails [message #645496 is a reply to message #645490] Mon, 07 December 2015 09:15 Go to previous messageGo to next message
juniordbanewbie
Messages: 250
Registered: April 2014
Senior Member
Dear Blackswan,

the problem is we are installing a 32 bit application server on the same machine. this machine requires 32 bit client binaries to be installed.

I've installed client home then database, becoz the new PATH would be Oracle DB Home first then Oracle Client home.

I've check the certification matrix for 11.2.0.4 rdbms against 2012 server r2 64 bit, it stated certified to run on this OS.
Re: ORA-01017 OS Authentication Fails [message #645497 is a reply to message #645495] Mon, 07 December 2015 09:18 Go to previous messageGo to next message
juniordbanewbie
Messages: 250
Registered: April 2014
Senior Member
Dear Michel,

how is it possible to trace connection problems due to os authentication? I believe that's only for remote connection right? thanks
Re: ORA-01017 OS Authentication Fails [message #645498 is a reply to message #645496] Mon, 07 December 2015 09:24 Go to previous messageGo to next message
John Watson
Messages: 8738
Registered: January 2010
Location: Global Village
Senior Member
You can't run SQL*Plus from your client home to connect with OS authentication. You have to run it from the DB home.
Re: ORA-01017 OS Authentication Fails [message #645510 is a reply to message #645498] Mon, 07 December 2015 17:20 Go to previous message
juniordbanewbie
Messages: 250
Registered: April 2014
Senior Member
BLack swan, you are right.

sqlnet.authentication_services = (NTS) => is correct

from Step by Step Guide to Troubleshoot and Solve the ORA-01031 Error for SYSDBA OS Authentication. (Doc ID 761830.1)

https://support.oracle.com/epmos/faces/DocumentDisplay?_afrLoop=243153311175259&id=761830.1&_afrWindowMode=0&_adf.ctrl-st ate=ijjzilpu7_74

Quote:


sqlnet.authentication_services = (NTS)

or

sqlnet.authentication_services = (NTS,KERBEROS5)



Error will be


C:\Users\olaf>sqlplus / as sysdba

SQL*Plus: Release 11.2.0.4.0 Production on Mo Dez 7 16:02:06 2015

Copyright (c) 1982, 2013, Oracle.  All rights reserved.

ERROR:
ORA-12638: Abrufen der Zugangsdaten nicht erfolgreich




C:\Users\olaf>sqlplus sys/********@orcl as sysdba

SQL*Plus: Release 11.2.0.4.0 Production on Mo Dez 7 16:03:19 2015

Copyright (c) 1982, 2013, Oracle.  All rights reserved.

ERROR:
ORA-12638: Abrufen der Zugangsdaten nicht erfolgreich


Benutzernamen eingeben:


Michel, you are also right, there's way to trace OS authentication failure just that I din search hard enough,

the way to trace is also from above MOS Document


John,
yes, I did run from the database home. becoz of this experience now I installed the client first then database knowing very well that the db oracle home will be appended first to the path.

anyway this problem have to be resolved by MOS. Hopefully they can resolve this as soon as possible.

thanks you guys for the fast response!

[Updated on: Mon, 07 December 2015 19:59]

Report message to a moderator

Previous Topic: HS Gateway software in windows 2012
Next Topic: Calling sql/server from PL/SQL
Goto Forum:
  


Current Time: Thu Aug 18 09:49:50 CDT 2022