ORA-12638 CREDENTIAL RETRIEVAL FAILED

Yesterday when I started my server after holiday it gives error ORA-12638 Credential Retrieval Failed,
Can anyone help. I have taken export backup of my schema before holiday. I can load that but I need advice what should I do to recover. To me its login connectivity problem.

check the file sqlnet.ora where the database is installed for an entry like SQLNET.AUTHENTICATION_SERVICES= (NTS). If so, disable it.

Similar Messages

  • Kerberos Authentication between Sharepoint 2013 Foundation - SSRS 2012 - Oracle 11g failing with ORA-12638: Credential retrieval failed

    I have set up SharePoint 2013 Foundation, SharePoint Reporting Services and SQL Server 2012 in a single server. I then created a Data Connection to Oracle 11g. Upon testing the connection, it throws the error “ORA-12638: Credential retrieval failed”.
    Given below are the steps of installation and configuration.
    Installation till basic authentication:
    The installation has been done in a
    single server.
    Installed SQL Server 2012 (Developer version).
    Selected only the following features:
    Database Engine Services
    Analysis Services
    Reporting Services – SharePoint
    Reporting Services Add-in for SharePoint Products
    Management Tools – Basic
    - Management Tools - Complete
      2. Installed SQL Server 2012 SP1.
      3. Installed SQL Server 2012 SP2.
      4. Installed SharePoint Foundation 2013.
      5. Created web application (without Kerberos; we did not even create the SPNs).
          The application pool has been configured to use Reporting Services account since it is a single server installation. This account has been registered as a managed
    account.
      6. Created Site Collection.
      7. Verified that Reporting Services is not installed.
      8. Installed SharePoint Reporting Services from SharePoint 2013 Management Shell.
      9. Verified that Reporting Services is installed.
     10. Created a new SQL Server Reporting Services Service Application and associated the Web Application to the new SQL server Reporting Services Service Application.
      11. Verified that SQL Server Reporting Services Service Application and its proxy have started. Reset IIS.
      12. Created a Site.
      13. Created a Data Connection library with “Report Data Source” content type.
      14. Created a Report Model library with “Report Builder Model” content type.
      15. Created a Report library with “Report Builder Report” content type.
      16. Uploaded an SMDL to the Report Model library.
      17. Added the top level site to Local Intranet instead of as a Trusted Site in the browser settings.
      18. Able to create and save a report using Report Builder.
    Hence, basic authentication is working and SSRS is able to connect to Oracle database.
    Next we have to configure Kerberos settings between SharePoint and SQL Server.
    Implementation of Kerberos authentication
    In the Report Server machine, opened the file C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\15\WebServices\Reporting\rsreportserver.config  and added the Authentication Types of RSWindowsNegotiate
    and RSWindowsKerberos.
     2.  Set up the following SPNs.
                   a) SQL Server Database Engine service (sqlDbSrv2):
                    setspn -S MSSQLSvc/CER1110:1433 CERDEMO\sqlDbSrv2
                    setspn -S MSSQLSvc/CER1110.cer.demo.com:1433 CERDEMO\sqlDbSrv2
                 In the Delegation tab of the account, selected "Trust this user for delegation to any service (Kerberos only)".
    b) Account: SharePoint Setup Admin account (spAdmin2)
         setspn -S HTTP/CER1110:9999 CERDEMO\spAdmin2
                    setspn -S HTTP/CER1110.cer.demo.com:9999 CERDEMO\spAdmin2
                    In the Delegation tab of the account, selected "Trust this user for delegation to any  service
    (Kerberos only)".
    c) Account: SQL Server Reporting Service account (sqlRepSrv2)
                       setspn -S HTTP/CER1110 CERDEMO\sqlRepSrv2
                       setspn -S HTTP/CER1110.cer.demo.com CERDEMO\sqlRepSrv2
                       In the Delegation tab of the account, selected "Trust this user for delegation to any service
    (Kerberos only)".
      3. Configure the Web Application to use “Negotiate (Kerberos)”.
      4. Logged in as SharePoint Administrator to the SharePoint server and opened the top level site in the IE browser.
         The Event Viewer logged the login process for the SharePoint Administration account as
    Negotiate and not Kerberos.
      5. Implemented Kerberos for Oracle database and client.
         Able to connect to the Oracle database via Kerberos authentication using SQL Plus.
      6. Turn on Windows Firewall.
      7. While testing the site's data connection using Kerberos settings, got the error
    “Can not convert claims identity to windows token. This may be due to user not logging in using windows credentials.”
          Note: The Data Connection for basic authentication still worked.
      8. Created a Claims to Windows Token Service account (spC2WTS2).
      9. Started the Claims to Windows Token Service.
     10. Registered the Claims to Windows Token Service account as a Managed Account.
     11. Changed the Claims To Windows Token Service to use the above managed account.
     12. Verified that the Claims to Windows Token Service account (spC2WTS2) is automatically added to the WSS_WPG local group on the SharePoint box.
          Note: The Reporting Services service account is also a part of the WSS_WPG local group.
     13. Added the Claims to Windows Token Service account (spC2WTS2) to the Local Admin Group on the machine having the SharePoint App Server.
     14. In the SharePoint box, added the Claims to Windows Token Service account (spC2WTS2) in the Act as part of the operating system policy right.
     15. The Claims to Windows Token Service account (spC2WTS2) has the WSS_WPG group configured.
          When the C2WTS service was configured to use the managed account Claims to Windows Token Service account (spC2WTS2) earlier, the spC2WTS2 account was automatically
    added to the WSS_WPG local group on the SharePoint box. The WSS_WPG group in turn is configured in c2wtshost.exe.config file.
     16. Verified that the Reporting Services account is a managed account and part of the WSS_WPG group.
     17. Earlier Service Application Pool - SQL Server Reporting Services App Pool service was associated with the SharePoint Admin account.
          Changed this to associate the Reporting Service account with the Service Application Pool - SQL Server Reporting Services App Pool service.
     18. Changed the delegation of the Reporting Service account to constrained delegation with Protocol Transitioning. This is because we are transitioning from one authentication scheme (Claims) to another (Windows Token).
          For this, the delegation has been changed to "Trust this user for delegation to specified services only". Also, selected the sub radio button "Use
    any authentication protocol". Selected the Oracle Kerberos service as the service to which this account can present delegated credentials.
          Note: The Reporting Service account already had an HTTP SPN.
     19. Next, the goal was to make the Claims To Windows Token Service account match the Reporting Service account.
           For this, we created a fake SPN for the Claims To Windows Token Service account since the delegation tab was missing.
           The delegation has been changed to "Trust this user for delegation to specified services only". Also, selected the sub radio button "Use any
    authentication protocol". Selected the Oracle Kerberos service as the service to which this account can present delegated credentials.
     20. Restarted the SharePoint server.
     21. Tested the data connection with the Kerberos settings again.
           Got the error
    “ORA-12638: Credential retrieval failed”.
    Can anyone tell me what is wrong with this setup?

    http://www.freeoraclehelp.com/2011/10/kerberos-authentication-for-oracle.html
    Problem4: ORA-12638: Credential retrieval failed
    Solution:  Make sure that SQLNET.KERBEROS5_CC_NAME is set in sqlnet.ora and okinit has been run before attempting to connect to the database.
    Do check 
    http://webcache.googleusercontent.com/search?q=cache:5a2Pf3FH7vkJ:externaltable.blogspot.com/2012/06/kerberos-authentication-and-proxy-users.html+&cd=5&hl=en&ct=clnk&gl=in
    If this helped you resolve your issue, please mark it Answered. You can reach me through http://itfreesupport.com/

  • Can't connect to sql*net, ORA-12638: Credential retrieval failed

    after installed oracle9i, I can use sqlplus, but when I try to use sql navigator, I can't connect to sql*net.
    I found out the following error message in logfile:
    Fatal NI connect error 12638, connecting to:
    (DESCRIPTION=
    (ADDRESS=
    (PROTOCOL=BEQ)
    (PROGRAM=oracle)
    (ARGV0=oracleoms)
    (ARGS='(DESCRIPTION=(LOCAL=YES)(ADDRESS=(PROTOCOL=beq)))'))
    (CONNECT_DATA=(SID=oms)(CID=(PROGRAM=c:\oracle\ora92\bin\ORACLE.EXE)(HOST=JZQGG31)(USER=OraUser))))
    VERSION INFORMATION:
         TNS for 32-bit Windows: Version 9.2.0.1.0 - Production
         Oracle Bequeath NT Protocol Adapter for 32-bit Windows: Version 9.2.0.1.0 - Production
    Time: 11-MAR-2004 17:04:17
    Tracing not turned on.
    Tns error struct:
    nr err code: 0
    ns main err code: 12638
    TNS-12638: Credential retrieval failed
    ns secondary err code: 0
    nt main err code: 0
    nt secondary err code: 0
    nt OS err code: 0
    =============================================
    Hope somebody can help me! Thanks!

    change in sqlnet.ora file
    find under oracle home\network\admin\sqlnet
    and
    SQLNET.AUTHENTICATION_SERVICES = (NTS)
    CHANGE TO
    SQLNET.AUTHENTICATION_SERVICES = (NONE)
    hope it will solve u r problem
    kuljeet pal singh

  • 11.2g Installation error on Win7:  ORA-12638 Credential Retrieval Failed

    I'm attempting to install an Oracle instance on my computer, which is Windows 7, 64-bit. In the middle of the installation I got an error fro Credential Retrieval. I've looked for solutions and they all related to modifying sqlnet.ora. However, at this point in the installation, there does not appear to be such a file on my system, so I can't very well change it. What can I do to install this? Thanks. I thought this might take thirty minutes, not my entire work day.
    Ken
    Edited by: user639117 on Aug 29, 2011 3:34 PM

    Here is the last 100 lines of the installation log. First, though, I have an Oracle client to use to talk to the Oracle database behind PeopleSoft, but I don't want to touch that database for what I'm doing. I need to have a separate database I can experiment in. Thanks.
    INFO: Launching Oracle Database 11g Release 2 Installer
    INFO: Started executing the flow in INTERACTIVE mode
    INFO: Waiting for completion of background operations
    INFO: Finishing all forked tasks at state prepInstall
    INFO: Waiting for completion all forked tasks at state prepInstall
    INFO: All forked task are completed at state prepInstall
    INFO: Completed background operations
    INFO: Executing action at state prepInstall
    INFO: Completed executing action at state <prepInstall>
    INFO: Waiting for completion of background operations
    INFO: Completed background operations
    INFO: Moved to state <prepInstall>
    INFO: Waiting for completion of background operations
    INFO: Completed background operations
    INFO: Validating view at state <prepInstall>
    INFO: Completed validating view at state <prepInstall>
    INFO: Validating state <prepInstall>
    WARNING: Validation disabled for the state prepInstall
    INFO: Completed validating state <prepInstall>
    INFO: Verifying route success
    INFO: Waiting for completion of background operations
    INFO: Completed background operations
    INFO: Executing action at state decideOCMInstall
    INFO: Completed executing action at state <decideOCMInstall>
    INFO: Waiting for completion of background operations
    INFO: Completed background operations
    INFO: Moved to state <decideOCMInstall>
    INFO: Waiting for completion of background operations
    INFO: Completed background operations
    INFO: Validating view at state <decideOCMInstall>
    INFO: Completed validating view at state <decideOCMInstall>
    INFO: Validating state <decideOCMInstall>
    WARNING: Validation disabled for the state decideOCMInstall
    INFO: Completed validating state <decideOCMInstall>
    INFO: Verifying route requireOCM
    INFO: Get view named [OCMDetailsUI]
    INFO: View for [OCMDetailsUI] is oracle.install.ivw.common.view.OCMDetailsGUI@6aa218a5
    INFO: Initializing view <OCMDetailsUI> at state <getOCMDetails>
    INFO: Completed initializing view <OCMDetailsUI> at state <getOCMDetails>
    INFO: Displaying view <OCMDetailsUI> at state <getOCMDetails>
    INFO: Completed displaying view <OCMDetailsUI> at state <getOCMDetails>
    INFO: Loading view <OCMDetailsUI> at state <getOCMDetails>
    INFO: Completed loading view <OCMDetailsUI> at state <getOCMDetails>
    INFO: Localizing view <OCMDetailsUI> at state <getOCMDetails>
    INFO: Completed localizing view <OCMDetailsUI> at state <getOCMDetails>
    INFO: Waiting for completion of background operations
    INFO: Completed background operations
    INFO: Executing action at state getOCMDetails
    INFO: Completed executing action at state <getOCMDetails>
    INFO: Waiting for completion of background operations
    INFO: Completed background operations
    INFO: Moved to state <getOCMDetails>
    INFO: Pause Oracle Database 11g Release 2 Installer
    INFO: Resume Oracle Database 11g Release 2 Installer
    INFO: Exit Status is 0
    INFO: Shutdown Oracle Database 11g Release 2 Installer

  • Oracle9i - ORA-12638 Credential retrival failed

    Hi,
    I am new to Oracle database and my first job is to install oracle9i into Window 2000. The installation failed at Database Configuration Assistant with error: ORA-12638 Credential retrival failed. I tried to create different type of database to see if the problem goes away but it persists. Please help!

    this is the solution i got from net
    On the client computer, modify SQLNET.ORA located in ORACLEHOME/NETWORK/ADMIN directory. Replace the line
    SQLNET.AUTHENTICATION_SERVICES=(NTS)
    with
    SQLNET.AUTHENTICATION_SERVICES=(NONE)
    you can try out..

  • ORA-12635 Credential Retrieval Failed

    Hi All
    When I try to install the Oracle database enterprise edition 8.1.7(release 3) on windows NT client(with service pack 5) it stopped at configuration assistant with an error ORA-12635 Credential failed with prompt to Ignore or Abort, when i chose ignore it hangs , so i cancelled the Installation and redo again. but the same error came out and i am unable to continue installation.
    when i try to connect database using SQLPlus as scott/tiger it gives an error TNS:12560-Protocol adaptor error.
    Thanks in anticipation for the reply
    M.Ayub

    Install the Oracle Server without any database and
    after try to create the database through the assistant.
    I recommend you to apply servipack6 for NT which is
    the lastest servipack for that OS.
    Joel P�rez

  • Error 12638-Credential retrieval failed

    I am running net8 on a win98 machine and attempting to connect to a v8.1.6 db on an NT box. I run in a Novell environment and do not load the "Client for Microsoft Networks". When this client is loaded I can connect, otherwise I get the 12638 error.
    My network people are adement about not loading the Microsoft Client.
    Does the Oracle client require that the Microsoft Client be loaded? Or is this indicative of a different problem?
    Thanks
    null

    Michael,
    Oracle uses a listener to set up all network protocols to listen for (listener.ora on the server). You may load or not Microsoft Network, but the you need to set up the listener to cary about Novell's SPX or to enable TCP/IP protocol in Novell env. Then you have to include a database descriptor, according SPX protocol in tnsnames.ora (on client site). In my oppinion, you are loosing one of your protocols when Microsoft Networks is not loaded (should not but...) and Oracle is not set to listen on Novell's SPX
    null

  • Credential retrieval failed

    I get Credential retrieval failed when trying to loggin to "run SQL Command" tool:
    SQL*Plus: Release 10.2.0.1.0 - Production on Fri Dec 8 16:08:26 2006
    Copyright (c) 1982, 2005, Oracle. All rights reserved.
    SQL> connect sys/<pwd> as sysdba
    ERROR:
    ORA-12638: Credential retrieval failed
    SQL> connect / as sysdba
    ERROR:
    ORA-12638: Credential retrieval failed
    SQL>
    Message was edited by:
    VS1

    You've posted to the wrong forum, this is the Application Express forum.

  • Help .....Credential retrieval failed Error

    Hi all,
    I am geting below error, when i run my application with backend Oracle 9i.
    ORA-12638: Credential retrieval failed
    Please Help.
    Thanks,
    Sam

    I believe this is because of Active Directory servers on your network.
    Essentially, your NT logon information has been lost by the network AD server. You will probably find that you can log on to a single session, but if you try and connect to another session from that one you will get this error. This can sometimes happen if you leave your client machine logged on over long periods of time (days or weeks).
    Try rebooting your client PC, which usually re-registers your credentials with the AD server.
    If it continues, speak to your network admin team.

  • Express edition and Credential retrieval failed - again

    Following a successfull installation of the Express edition, I get the common problems of home page not available and 'credential retrieval failed' when I try to login as the system/sysdba. I have read all the threads I have found and have found no remedies which help. I have also tried the following:
    - sqlnet.ora: removing the (NTS) auth. service. This just creates another error message:'Oracle not available'
    What more is there to check?
    My OS is Windows XP SP3
    Re-installation: tried multiple times as local administrator and user with the admin rights - no change.

    Well, I am not an expert but, after having installed Oracle XE several times on several platforms, and having experienced some problems, I suspect that you should give a try with WXP SP2 instead of WXP SP3...
    Good luck!
    Victor

  • Upgrade to 10.2.0.2: ORA-12631: Username retrieval failed

    hello
    I am upgrading oracle 9.2.0.7 to 10.2.0.2.
    When I start the upgrade assistent, i receive the following error:
    ORA-12631: Username retrieval failed
    Before I started upgrade assistent, i could connect to SQL and everything was okay. Now I can connect to SQL but i can select nothing. Then i receive the same error: Username retrieval failed.
    Thank you very much for helping.
    Best regards
    Selim

    Refer notes
    614036 
    620540
    If these dont solve your problem write back

  • TNS-12683 "Credential retrieval failed"

    Hi all,
    Can someone explain to me what that error means?
    On the forums I find this:
    "“NTS” option tries to use your Windows credentials to authenticate with Oracle. So unless your Oracle logins match your Windows login – this may fail."
    "The Oracle Database adapter requires the adapter clients to provide client credentials. The adapter uses these credentials to authenticate the user with the Oracle database and to establish a connection."
    What this really means? I can not connect to my database.
    One solution is:
    in sqlnet.ora change
    SQLNET.AUTHENTICATION_SERVICES= (NTS)
    to
    SQLNET.AUTHENTICATION_SERVICES= (NONE)
    My question is what cous this error, and why database works well for few year, and suddenly the error occurs? My listener.log file is 2Gb large, is this a reason for error?
    Tnx,
    Smee

    I have had this error when there were too many sessions for my database. Ran fine for a few months and then hit our session limit from initialization parameters. Ours had been set to 250 and we needed 300.

  • ORA-12631: Username retrieval failed

    Hi all,
    I am trying to connect to my Oracle XE Database and I am getting this error message when I attempt to login using the 'system' user.
    Also, I am unable to get to the 'localhost:8080' - I have tried re-installing the software a number of times, but no luck here at all.
    I've checked that I've got nothing running on 8080 - there is nothing. I have also made sure that my username is part of 'Administrators' and 'ORA_DBA', but this doesn't work either.
    Also, when I look at the lsnrctl status page, I get this:
    LSNRCTL for 32-bit Windows: Version 10.2.0.1.0 - Production on 14-FEB-2008 12:11
    :54
    Copyright (c) 1991, 2005, Oracle. All rights reserved.
    Welcome to LSNRCTL, type "help" for information.
    LSNRCTL> status
    Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=EXTPROC_FOR_XE)))
    STATUS of the LISTENER
    Alias LISTENER
    Version TNSLSNR for 32-bit Windows: Version 10.2.0.1.0 - Produ
    ction
    Start Date 14-FEB-2008 09:35:13
    Uptime 0 days 2 hr. 36 min. 43 sec
    Trace Level off
    Security ON: Local OS Authentication
    SNMP OFF
    Default Service XE
    Listener Parameter File c:\oraclexe\app\oracle\product\10.2.0\server\network\a
    dmin\listener.ora
    Listener Log File c:\oraclexe\app\oracle\product\10.2.0\server\network\l
    og\listener.log
    Listening Endpoints Summary...
    (DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(PIPENAME=\\.\pipe\EXTPROC_FOR_XEipc)))
    (DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=BTG268061.iuser.iroot.adidom.com)(PO
    RT=1521)))
    Services Summary...
    Service "CLRExtProc" has 1 instance(s).
    Instance "CLRExtProc", status UNKNOWN, has 1 handler(s) for this service...
    Service "PLSExtProc" has 1 instance(s).
    Instance "PLSExtProc", status UNKNOWN, has 1 handler(s) for this service...
    The command completed successfully
    LSNRCTL>
    I can't see the XE Service here. This is a fresh installation, anyone know what I am doing wrong here?

    Crispy,
    I am not very sure about XE. Here is what a quick search google reveals about your error message.
    http://www.dbasupport.com/forums/showthread.php?t=22246
    About the listener, try put statically the dtabase service entry in the listener.ora and then restart.It shoudl come up with that.
    Aman....

  • ORA-12638 Error

    While reinstalling my oracle 8.1.6 enterprise edition server on win2000, i'm getting the above error (ORA-12638: Credential Retrieval Failed).
    I'm getting same error in my another existing database also while connecting to it.
    Can anyone please help me to troble shoot this?
    Thanks in advance.

    Comment the
    #SQLNET.AUTHENTICATION_SERVICES= (NTS)
    in the sqlnet.ora file located at
    $home/ora81/network/admin/sqlnet.ora on the server side.
    Hope this will solve ur problem.
    Abha.

  • RMAN-00554 with ORA-12638

    Hi,
    I'm receiving the following error when I try to start RMAN from a command prompt. I can connect to the database from the Enterprise Manager and from SQLPlus without any problems. I've read about removing the sqlnet.authentication_services line from sqlnet.ora, but I don't know if I should since the database connects fine outside of RMAN:
    C:\>rman target sys/password@DB1
    Recovery Manager: Release 10.2.0.1.0 - Production on Mon May 15 10:01:40 2006
    Copyright (c) 1982, 2005, Oracle. All rights reserved.
    RMAN-00571: ===========================================================
    RMAN-00569: =============== ERROR MESSAGE STACK FOLLOWS ===============
    RMAN-00571: ===========================================================
    RMAN-00554: initialization of internal recovery manager package failed
    RMAN-04005: error from target database:
    ORA-12638: Credential retrieval failed
    Thanks,
    Nora

    Hi,
    In 'C:\oracle\product\10.2.0\db_1\NETWORK\ADMIN', my files look like this (the line in sqlnet.ora is still present-- i haven't removed or changed it yet):
    TNSNAMES.ORA
    # Generated by Oracle configuration tools.
    DB1 =
    (DESCRIPTION =
    (ADDRESS_LIST =
    (ADDRESS = (PROTOCOL = TCP)(HOST = host1)(PORT = 1521))
    (CONNECT_DATA =
    (SERVER = DEDICATED)
    (SERVICE_NAME = db1)
    SQLNET.ORA:
    # This file is actually generated by netca. But if customers choose to
    # install "Software Only", this file wont exist and without the native
    # authentication, they will not be able to connect to the database on NT.
    SQLNET.AUTHENTICATION_SERVICES = (NTS)
    NAMES.DIRECTORY_PATH= (TNSNAMES, EZCONNECT)
    LISTENER.ORA:
    # listener.ora Network Configuration File: C:\oracle\product\10.2.0\db_1\NETWORK\ADMIN\listener.ora
    # Generated by Oracle configuration tools.
    SID_LIST_LISTENER =
    (SID_LIST =
    (SID_DESC =
    (SID_NAME = DB1)
    (ORACLE_HOME = C:\oracle\product\10.2.0\Db_1)
    (GLOBAL_DBNAME = DB1)
    LISTENER =
    (DESCRIPTION =
    (ADDRESS = (PROTOCOL = TCP)(HOST = host1)(PORT = 1521))
    I don't get ORA-01031 in RMAN with this configuration, but I do get ORA-12638.
    Otherwise, I can connect fine to my database if I don't use 'connect / as sysdba'.
    Thanks again,
    Nora

Maybe you are looking for