ORA-28040: No matching authentication protocol in version 11.2.0.3

789546

Hi,

I am working on database server 11.2.0.3 and the OS is linux 86 bit. i created an entry in sqlnet.ora file with

SQLNET.ALLOWED_LOGON_VERSION = 10

it is failing with ORA-28040: No matching authentication protocol error and i am not able to connect as sys till I comment the entry. How do i set this entry and where in the client side do I need to set this entry? Also, do I have to set it to SQLNET.ALLOWED_LOGON_VERSION = 11 instead? I am confused. Please help

thanks a lot.

mseberg

Hello;

Any chance you are using a JDBC driver?

Try changing it to : ( Workaround )


SQLNET.ALLOWED_LOGON_VERSION=8

OR = 9


This is an old bug if I remember correctly.

Bug 8730787


Best Regards

mseberg

Added to mine, but I'm unable to recreate the error. Using Oracle 11 client.

Found this

Action: Administrator should set SQLNET_ALLOWED_LOGON_VERSION parameter
on both client and servers to values that matches the minimum
version supported in the system.





Edited by: mseberg on Feb 16, 2012 12:34 PM

Edited by: mseberg on Feb 16, 2012 12:36 PM

Andy Klock

I'm confused to. The error implies that you are using a client that is 9i or below. What are you using to connect?

http://docs.oracle.com/cd/B28359_01/network.111/b28317/sqlnet.htm#BIIEAFHA

789546

we are using JDBC 11g driver

mseberg

That might be it then :

After Applying JDBC Driver Patch (6779501) , Problem still occurs (ORA-28040) [ID 1267169.1]

OR


Cannot set up certs for trusted CAs Error When Using JDBC 11g And SQLNET.ALLOWED_LOGON_VERSION=10 [ID 1315314.1]

When using the property "SQLNET.ALLOWED_LOGON_VERSION=10" set in the file sqlnet.ora on the server side, and using a JDBC thin driver on the client side, the connection failed with ORA-28040: No matching authentication protocol.

Best Regards

mseberg

789546

it is ojdbc6-11.2.0.1.0.jar . Do we have to set the same entry in sqlnet.ora in the client side?


Regards

mseberg

Hello;

My thought based on the Oracle note I read is YES.

But the Java is getting out of my area so I'm not the best person to ask.


That said you have to test it anyway, so I start with that.


SQLNET_ALLOWED_LOGON_VERSIONS=(10,9,8,7)

Note: 10,9,8,are 7 the only values allowed.

Best Regards

mseberg