SQLNET.KERBEROS5_CC_NAME=MSLSA: / Authentication fails / ORA-12638: Credential retrieval failed

@orcl

Hi,

Does anybody have working kerberos authentication using the following option inside Windows Client SQLNET.ORA

SQLNET.KERBEROS5_CC_NAME=MSLSA:

Configuration works if we remove parameter "SQLNET.KERBEROS5_CC_NAME=" and then take ticket using okinit.exe.

Client on Windows is x64 v18.5

Server on Oracle Linux is x64 v18.5

C:\Users\test2>sqlplus /@orcl

SQL*Plus: Release 18.0.0.0.0 - Production on Fri Apr 12 23:17:03 2019

Version 18.5.0.0.0

ERROR:

ORA-12638: Credential retrieval failed

Here is fragment of client side trace file (TRACE_LEVEL_CLIENT=support).

First faulty line in trace for my eye is: "nauztk5aauthent:Error building credentials request "9".", which is converted to Oracle error 12638 few lines later ...