ORA-12638 CREDENTIAL RETRIEVAL FAILED
Yesterday when I started my server after holiday it gives error ORA-12638 Credential Retrieval Failed,
Can anyone help. I have taken export backup of my schema before holiday. I can load that but I need advice what should I do to recover. To me its login connectivity problem.
check the file sqlnet.ora where the database is installed for an entry like SQLNET.AUTHENTICATION_SERVICES= (NTS). If so, disable it.
Similar Messages
-
I have set up SharePoint 2013 Foundation, SharePoint Reporting Services and SQL Server 2012 in a single server. I then created a Data Connection to Oracle 11g. Upon testing the connection, it throws the error “ORA-12638: Credential retrieval failed”.
Given below are the steps of installation and configuration.
Installation till basic authentication:
The installation has been done in a
single server.
Installed SQL Server 2012 (Developer version).
Selected only the following features:
Database Engine Services
Analysis Services
Reporting Services – SharePoint
Reporting Services Add-in for SharePoint Products
Management Tools – Basic
- Management Tools - Complete
2. Installed SQL Server 2012 SP1.
3. Installed SQL Server 2012 SP2.
4. Installed SharePoint Foundation 2013.
5. Created web application (without Kerberos; we did not even create the SPNs).
The application pool has been configured to use Reporting Services account since it is a single server installation. This account has been registered as a managed
account.
6. Created Site Collection.
7. Verified that Reporting Services is not installed.
8. Installed SharePoint Reporting Services from SharePoint 2013 Management Shell.
9. Verified that Reporting Services is installed.
10. Created a new SQL Server Reporting Services Service Application and associated the Web Application to the new SQL server Reporting Services Service Application.
11. Verified that SQL Server Reporting Services Service Application and its proxy have started. Reset IIS.
12. Created a Site.
13. Created a Data Connection library with “Report Data Source” content type.
14. Created a Report Model library with “Report Builder Model” content type.
15. Created a Report library with “Report Builder Report” content type.
16. Uploaded an SMDL to the Report Model library.
17. Added the top level site to Local Intranet instead of as a Trusted Site in the browser settings.
18. Able to create and save a report using Report Builder.
Hence, basic authentication is working and SSRS is able to connect to Oracle database.
Next we have to configure Kerberos settings between SharePoint and SQL Server.
Implementation of Kerberos authentication
In the Report Server machine, opened the file C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\15\WebServices\Reporting\rsreportserver.config and added the Authentication Types of RSWindowsNegotiate
and RSWindowsKerberos.
2. Set up the following SPNs.
a) SQL Server Database Engine service (sqlDbSrv2):
setspn -S MSSQLSvc/CER1110:1433 CERDEMO\sqlDbSrv2
setspn -S MSSQLSvc/CER1110.cer.demo.com:1433 CERDEMO\sqlDbSrv2
In the Delegation tab of the account, selected "Trust this user for delegation to any service (Kerberos only)".
b) Account: SharePoint Setup Admin account (spAdmin2)
setspn -S HTTP/CER1110:9999 CERDEMO\spAdmin2
setspn -S HTTP/CER1110.cer.demo.com:9999 CERDEMO\spAdmin2
In the Delegation tab of the account, selected "Trust this user for delegation to any service
(Kerberos only)".
c) Account: SQL Server Reporting Service account (sqlRepSrv2)
setspn -S HTTP/CER1110 CERDEMO\sqlRepSrv2
setspn -S HTTP/CER1110.cer.demo.com CERDEMO\sqlRepSrv2
In the Delegation tab of the account, selected "Trust this user for delegation to any service
(Kerberos only)".
3. Configure the Web Application to use “Negotiate (Kerberos)”.
4. Logged in as SharePoint Administrator to the SharePoint server and opened the top level site in the IE browser.
The Event Viewer logged the login process for the SharePoint Administration account as
Negotiate and not Kerberos.
5. Implemented Kerberos for Oracle database and client.
Able to connect to the Oracle database via Kerberos authentication using SQL Plus.
6. Turn on Windows Firewall.
7. While testing the site's data connection using Kerberos settings, got the error
“Can not convert claims identity to windows token. This may be due to user not logging in using windows credentials.”
Note: The Data Connection for basic authentication still worked.
8. Created a Claims to Windows Token Service account (spC2WTS2).
9. Started the Claims to Windows Token Service.
10. Registered the Claims to Windows Token Service account as a Managed Account.
11. Changed the Claims To Windows Token Service to use the above managed account.
12. Verified that the Claims to Windows Token Service account (spC2WTS2) is automatically added to the WSS_WPG local group on the SharePoint box.
Note: The Reporting Services service account is also a part of the WSS_WPG local group.
13. Added the Claims to Windows Token Service account (spC2WTS2) to the Local Admin Group on the machine having the SharePoint App Server.
14. In the SharePoint box, added the Claims to Windows Token Service account (spC2WTS2) in the Act as part of the operating system policy right.
15. The Claims to Windows Token Service account (spC2WTS2) has the WSS_WPG group configured.
When the C2WTS service was configured to use the managed account Claims to Windows Token Service account (spC2WTS2) earlier, the spC2WTS2 account was automatically
added to the WSS_WPG local group on the SharePoint box. The WSS_WPG group in turn is configured in c2wtshost.exe.config file.
16. Verified that the Reporting Services account is a managed account and part of the WSS_WPG group.
17. Earlier Service Application Pool - SQL Server Reporting Services App Pool service was associated with the SharePoint Admin account.
Changed this to associate the Reporting Service account with the Service Application Pool - SQL Server Reporting Services App Pool service.
18. Changed the delegation of the Reporting Service account to constrained delegation with Protocol Transitioning. This is because we are transitioning from one authentication scheme (Claims) to another (Windows Token).
For this, the delegation has been changed to "Trust this user for delegation to specified services only". Also, selected the sub radio button "Use
any authentication protocol". Selected the Oracle Kerberos service as the service to which this account can present delegated credentials.
Note: The Reporting Service account already had an HTTP SPN.
19. Next, the goal was to make the Claims To Windows Token Service account match the Reporting Service account.
For this, we created a fake SPN for the Claims To Windows Token Service account since the delegation tab was missing.
The delegation has been changed to "Trust this user for delegation to specified services only". Also, selected the sub radio button "Use any
authentication protocol". Selected the Oracle Kerberos service as the service to which this account can present delegated credentials.
20. Restarted the SharePoint server.
21. Tested the data connection with the Kerberos settings again.
Got the error
“ORA-12638: Credential retrieval failed”.
Can anyone tell me what is wrong with this setup?http://www.freeoraclehelp.com/2011/10/kerberos-authentication-for-oracle.html
Problem4: ORA-12638: Credential retrieval failed
Solution: Make sure that SQLNET.KERBEROS5_CC_NAME is set in sqlnet.ora and okinit has been run before attempting to connect to the database.
Do check
http://webcache.googleusercontent.com/search?q=cache:5a2Pf3FH7vkJ:externaltable.blogspot.com/2012/06/kerberos-authentication-and-proxy-users.html+&cd=5&hl=en&ct=clnk&gl=in
If this helped you resolve your issue, please mark it Answered. You can reach me through http://itfreesupport.com/ -
Can't connect to sql*net, ORA-12638: Credential retrieval failed
after installed oracle9i, I can use sqlplus, but when I try to use sql navigator, I can't connect to sql*net.
I found out the following error message in logfile:
Fatal NI connect error 12638, connecting to:
(DESCRIPTION=
(ADDRESS=
(PROTOCOL=BEQ)
(PROGRAM=oracle)
(ARGV0=oracleoms)
(ARGS='(DESCRIPTION=(LOCAL=YES)(ADDRESS=(PROTOCOL=beq)))'))
(CONNECT_DATA=(SID=oms)(CID=(PROGRAM=c:\oracle\ora92\bin\ORACLE.EXE)(HOST=JZQGG31)(USER=OraUser))))
VERSION INFORMATION:
TNS for 32-bit Windows: Version 9.2.0.1.0 - Production
Oracle Bequeath NT Protocol Adapter for 32-bit Windows: Version 9.2.0.1.0 - Production
Time: 11-MAR-2004 17:04:17
Tracing not turned on.
Tns error struct:
nr err code: 0
ns main err code: 12638
TNS-12638: Credential retrieval failed
ns secondary err code: 0
nt main err code: 0
nt secondary err code: 0
nt OS err code: 0
=============================================
Hope somebody can help me! Thanks!change in sqlnet.ora file
find under oracle home\network\admin\sqlnet
and
SQLNET.AUTHENTICATION_SERVICES = (NTS)
CHANGE TO
SQLNET.AUTHENTICATION_SERVICES = (NONE)
hope it will solve u r problem
kuljeet pal singh -
11.2g Installation error on Win7: ORA-12638 Credential Retrieval Failed
I'm attempting to install an Oracle instance on my computer, which is Windows 7, 64-bit. In the middle of the installation I got an error fro Credential Retrieval. I've looked for solutions and they all related to modifying sqlnet.ora. However, at this point in the installation, there does not appear to be such a file on my system, so I can't very well change it. What can I do to install this? Thanks. I thought this might take thirty minutes, not my entire work day.
Ken
Edited by: user639117 on Aug 29, 2011 3:34 PMHere is the last 100 lines of the installation log. First, though, I have an Oracle client to use to talk to the Oracle database behind PeopleSoft, but I don't want to touch that database for what I'm doing. I need to have a separate database I can experiment in. Thanks.
INFO: Launching Oracle Database 11g Release 2 Installer
INFO: Started executing the flow in INTERACTIVE mode
INFO: Waiting for completion of background operations
INFO: Finishing all forked tasks at state prepInstall
INFO: Waiting for completion all forked tasks at state prepInstall
INFO: All forked task are completed at state prepInstall
INFO: Completed background operations
INFO: Executing action at state prepInstall
INFO: Completed executing action at state <prepInstall>
INFO: Waiting for completion of background operations
INFO: Completed background operations
INFO: Moved to state <prepInstall>
INFO: Waiting for completion of background operations
INFO: Completed background operations
INFO: Validating view at state <prepInstall>
INFO: Completed validating view at state <prepInstall>
INFO: Validating state <prepInstall>
WARNING: Validation disabled for the state prepInstall
INFO: Completed validating state <prepInstall>
INFO: Verifying route success
INFO: Waiting for completion of background operations
INFO: Completed background operations
INFO: Executing action at state decideOCMInstall
INFO: Completed executing action at state <decideOCMInstall>
INFO: Waiting for completion of background operations
INFO: Completed background operations
INFO: Moved to state <decideOCMInstall>
INFO: Waiting for completion of background operations
INFO: Completed background operations
INFO: Validating view at state <decideOCMInstall>
INFO: Completed validating view at state <decideOCMInstall>
INFO: Validating state <decideOCMInstall>
WARNING: Validation disabled for the state decideOCMInstall
INFO: Completed validating state <decideOCMInstall>
INFO: Verifying route requireOCM
INFO: Get view named [OCMDetailsUI]
INFO: View for [OCMDetailsUI] is oracle.install.ivw.common.view.OCMDetailsGUI@6aa218a5
INFO: Initializing view <OCMDetailsUI> at state <getOCMDetails>
INFO: Completed initializing view <OCMDetailsUI> at state <getOCMDetails>
INFO: Displaying view <OCMDetailsUI> at state <getOCMDetails>
INFO: Completed displaying view <OCMDetailsUI> at state <getOCMDetails>
INFO: Loading view <OCMDetailsUI> at state <getOCMDetails>
INFO: Completed loading view <OCMDetailsUI> at state <getOCMDetails>
INFO: Localizing view <OCMDetailsUI> at state <getOCMDetails>
INFO: Completed localizing view <OCMDetailsUI> at state <getOCMDetails>
INFO: Waiting for completion of background operations
INFO: Completed background operations
INFO: Executing action at state getOCMDetails
INFO: Completed executing action at state <getOCMDetails>
INFO: Waiting for completion of background operations
INFO: Completed background operations
INFO: Moved to state <getOCMDetails>
INFO: Pause Oracle Database 11g Release 2 Installer
INFO: Resume Oracle Database 11g Release 2 Installer
INFO: Exit Status is 0
INFO: Shutdown Oracle Database 11g Release 2 Installer -
Oracle9i - ORA-12638 Credential retrival failed
Hi,
I am new to Oracle database and my first job is to install oracle9i into Window 2000. The installation failed at Database Configuration Assistant with error: ORA-12638 Credential retrival failed. I tried to create different type of database to see if the problem goes away but it persists. Please help!this is the solution i got from net
On the client computer, modify SQLNET.ORA located in ORACLEHOME/NETWORK/ADMIN directory. Replace the line
SQLNET.AUTHENTICATION_SERVICES=(NTS)
with
SQLNET.AUTHENTICATION_SERVICES=(NONE)
you can try out.. -
ORA-12635 Credential Retrieval Failed
Hi All
When I try to install the Oracle database enterprise edition 8.1.7(release 3) on windows NT client(with service pack 5) it stopped at configuration assistant with an error ORA-12635 Credential failed with prompt to Ignore or Abort, when i chose ignore it hangs , so i cancelled the Installation and redo again. but the same error came out and i am unable to continue installation.
when i try to connect database using SQLPlus as scott/tiger it gives an error TNS:12560-Protocol adaptor error.
Thanks in anticipation for the reply
M.AyubInstall the Oracle Server without any database and
after try to create the database through the assistant.
I recommend you to apply servipack6 for NT which is
the lastest servipack for that OS.
Joel P�rez -
Error 12638-Credential retrieval failed
I am running net8 on a win98 machine and attempting to connect to a v8.1.6 db on an NT box. I run in a Novell environment and do not load the "Client for Microsoft Networks". When this client is loaded I can connect, otherwise I get the 12638 error.
My network people are adement about not loading the Microsoft Client.
Does the Oracle client require that the Microsoft Client be loaded? Or is this indicative of a different problem?
Thanks
nullMichael,
Oracle uses a listener to set up all network protocols to listen for (listener.ora on the server). You may load or not Microsoft Network, but the you need to set up the listener to cary about Novell's SPX or to enable TCP/IP protocol in Novell env. Then you have to include a database descriptor, according SPX protocol in tnsnames.ora (on client site). In my oppinion, you are loosing one of your protocols when Microsoft Networks is not loaded (should not but...) and Oracle is not set to listen on Novell's SPX
null -
I get Credential retrieval failed when trying to loggin to "run SQL Command" tool:
SQL*Plus: Release 10.2.0.1.0 - Production on Fri Dec 8 16:08:26 2006
Copyright (c) 1982, 2005, Oracle. All rights reserved.
SQL> connect sys/<pwd> as sysdba
ERROR:
ORA-12638: Credential retrieval failed
SQL> connect / as sysdba
ERROR:
ORA-12638: Credential retrieval failed
SQL>
Message was edited by:
VS1You've posted to the wrong forum, this is the Application Express forum.
-
Help .....Credential retrieval failed Error
Hi all,
I am geting below error, when i run my application with backend Oracle 9i.
ORA-12638: Credential retrieval failed
Please Help.
Thanks,
SamI believe this is because of Active Directory servers on your network.
Essentially, your NT logon information has been lost by the network AD server. You will probably find that you can log on to a single session, but if you try and connect to another session from that one you will get this error. This can sometimes happen if you leave your client machine logged on over long periods of time (days or weeks).
Try rebooting your client PC, which usually re-registers your credentials with the AD server.
If it continues, speak to your network admin team. -
Express edition and Credential retrieval failed - again
Following a successfull installation of the Express edition, I get the common problems of home page not available and 'credential retrieval failed' when I try to login as the system/sysdba. I have read all the threads I have found and have found no remedies which help. I have also tried the following:
- sqlnet.ora: removing the (NTS) auth. service. This just creates another error message:'Oracle not available'
What more is there to check?
My OS is Windows XP SP3
Re-installation: tried multiple times as local administrator and user with the admin rights - no change.Well, I am not an expert but, after having installed Oracle XE several times on several platforms, and having experienced some problems, I suspect that you should give a try with WXP SP2 instead of WXP SP3...
Good luck!
Victor -
Upgrade to 10.2.0.2: ORA-12631: Username retrieval failed
hello
I am upgrading oracle 9.2.0.7 to 10.2.0.2.
When I start the upgrade assistent, i receive the following error:
ORA-12631: Username retrieval failed
Before I started upgrade assistent, i could connect to SQL and everything was okay. Now I can connect to SQL but i can select nothing. Then i receive the same error: Username retrieval failed.
Thank you very much for helping.
Best regards
SelimRefer notes
614036
620540
If these dont solve your problem write back -
TNS-12683 "Credential retrieval failed"
Hi all,
Can someone explain to me what that error means?
On the forums I find this:
"“NTS” option tries to use your Windows credentials to authenticate with Oracle. So unless your Oracle logins match your Windows login – this may fail."
"The Oracle Database adapter requires the adapter clients to provide client credentials. The adapter uses these credentials to authenticate the user with the Oracle database and to establish a connection."
What this really means? I can not connect to my database.
One solution is:
in sqlnet.ora change
SQLNET.AUTHENTICATION_SERVICES= (NTS)
to
SQLNET.AUTHENTICATION_SERVICES= (NONE)
My question is what cous this error, and why database works well for few year, and suddenly the error occurs? My listener.log file is 2Gb large, is this a reason for error?
Tnx,
SmeeI have had this error when there were too many sessions for my database. Ran fine for a few months and then hit our session limit from initialization parameters. Ours had been set to 250 and we needed 300.
-
ORA-12631: Username retrieval failed
Hi all,
I am trying to connect to my Oracle XE Database and I am getting this error message when I attempt to login using the 'system' user.
Also, I am unable to get to the 'localhost:8080' - I have tried re-installing the software a number of times, but no luck here at all.
I've checked that I've got nothing running on 8080 - there is nothing. I have also made sure that my username is part of 'Administrators' and 'ORA_DBA', but this doesn't work either.
Also, when I look at the lsnrctl status page, I get this:
LSNRCTL for 32-bit Windows: Version 10.2.0.1.0 - Production on 14-FEB-2008 12:11
:54
Copyright (c) 1991, 2005, Oracle. All rights reserved.
Welcome to LSNRCTL, type "help" for information.
LSNRCTL> status
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=EXTPROC_FOR_XE)))
STATUS of the LISTENER
Alias LISTENER
Version TNSLSNR for 32-bit Windows: Version 10.2.0.1.0 - Produ
ction
Start Date 14-FEB-2008 09:35:13
Uptime 0 days 2 hr. 36 min. 43 sec
Trace Level off
Security ON: Local OS Authentication
SNMP OFF
Default Service XE
Listener Parameter File c:\oraclexe\app\oracle\product\10.2.0\server\network\a
dmin\listener.ora
Listener Log File c:\oraclexe\app\oracle\product\10.2.0\server\network\l
og\listener.log
Listening Endpoints Summary...
(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(PIPENAME=\\.\pipe\EXTPROC_FOR_XEipc)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=BTG268061.iuser.iroot.adidom.com)(PO
RT=1521)))
Services Summary...
Service "CLRExtProc" has 1 instance(s).
Instance "CLRExtProc", status UNKNOWN, has 1 handler(s) for this service...
Service "PLSExtProc" has 1 instance(s).
Instance "PLSExtProc", status UNKNOWN, has 1 handler(s) for this service...
The command completed successfully
LSNRCTL>
I can't see the XE Service here. This is a fresh installation, anyone know what I am doing wrong here?Crispy,
I am not very sure about XE. Here is what a quick search google reveals about your error message.
http://www.dbasupport.com/forums/showthread.php?t=22246
About the listener, try put statically the dtabase service entry in the listener.ora and then restart.It shoudl come up with that.
Aman.... -
While reinstalling my oracle 8.1.6 enterprise edition server on win2000, i'm getting the above error (ORA-12638: Credential Retrieval Failed).
I'm getting same error in my another existing database also while connecting to it.
Can anyone please help me to troble shoot this?
Thanks in advance.Comment the
#SQLNET.AUTHENTICATION_SERVICES= (NTS)
in the sqlnet.ora file located at
$home/ora81/network/admin/sqlnet.ora on the server side.
Hope this will solve ur problem.
Abha. -
Hi,
I'm receiving the following error when I try to start RMAN from a command prompt. I can connect to the database from the Enterprise Manager and from SQLPlus without any problems. I've read about removing the sqlnet.authentication_services line from sqlnet.ora, but I don't know if I should since the database connects fine outside of RMAN:
C:\>rman target sys/password@DB1
Recovery Manager: Release 10.2.0.1.0 - Production on Mon May 15 10:01:40 2006
Copyright (c) 1982, 2005, Oracle. All rights reserved.
RMAN-00571: ===========================================================
RMAN-00569: =============== ERROR MESSAGE STACK FOLLOWS ===============
RMAN-00571: ===========================================================
RMAN-00554: initialization of internal recovery manager package failed
RMAN-04005: error from target database:
ORA-12638: Credential retrieval failed
Thanks,
NoraHi,
In 'C:\oracle\product\10.2.0\db_1\NETWORK\ADMIN', my files look like this (the line in sqlnet.ora is still present-- i haven't removed or changed it yet):
TNSNAMES.ORA
# Generated by Oracle configuration tools.
DB1 =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = TCP)(HOST = host1)(PORT = 1521))
(CONNECT_DATA =
(SERVER = DEDICATED)
(SERVICE_NAME = db1)
SQLNET.ORA:
# This file is actually generated by netca. But if customers choose to
# install "Software Only", this file wont exist and without the native
# authentication, they will not be able to connect to the database on NT.
SQLNET.AUTHENTICATION_SERVICES = (NTS)
NAMES.DIRECTORY_PATH= (TNSNAMES, EZCONNECT)
LISTENER.ORA:
# listener.ora Network Configuration File: C:\oracle\product\10.2.0\db_1\NETWORK\ADMIN\listener.ora
# Generated by Oracle configuration tools.
SID_LIST_LISTENER =
(SID_LIST =
(SID_DESC =
(SID_NAME = DB1)
(ORACLE_HOME = C:\oracle\product\10.2.0\Db_1)
(GLOBAL_DBNAME = DB1)
LISTENER =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = TCP)(HOST = host1)(PORT = 1521))
I don't get ORA-01031 in RMAN with this configuration, but I do get ORA-12638.
Otherwise, I can connect fine to my database if I don't use 'connect / as sysdba'.
Thanks again,
Nora
Maybe you are looking for
-
Acrobat (pro) 9 not working in safari and other problems
i have several problems with acrobat pro 9.0.0: 1) i installed acrobat pro 9 but when i go to "help" menu i get message: "there was a raise without a handler. the application will now exit" yet all other menu's function well. 2) when i try to open a
-
hi everyone when i am putting music from my computer to my phone every song saves under a seperate album on my phone.. how can i fix this?
-
How to use Microsoft DateTime Picker ActiveX control in Forms 6i?
Does anyone have idea on how to use Microsoft Date-Time Picker ActiveX component in Forms 6i? Please give me coding examples for using this control to retrieve & store date at the backend. Regards
-
Does MXF OP1A work with Premiere Pro CC 2014, and later?
Is below formats can work through Adobe preimere CC File Format: MXF OP1A Filename extension : *.mxf VIDEO and ADVANCED VIDEO: MPEG Type: MPEG-2 Long GOP Format Profile: 4:2:2@High Level Video Resolution: 1920x1080(PAL) 16:9 DISPLAY Frame Rate: 25
-
New Mac Pro/ Final Cut X User--Jaggies and Low Res Playback
Good morning, New Macx Pro with Cinema display and Final Cut X (demo) user. Working with P2 footage and noticed jagged egdes in upon playback. In other words, the footages appears as low res. I have the program monitor is set to full res and "fit". I