.Net ManagedDataAccess fails to connect using Windows Native Authentication

Maria B.

We're trying to connect to Oracle database using .Net ManagedDataAccess (Nuget package Oracle.ManagedDataAccess 19.3.0) and Windows Native Authentication, but database responds with ORA-01017: invalid username/password; login denied

Connecting with same user via SqlPlus works without problem

Both machines have windows os and belong to same domain

All 3 steps according to 3.3.8 Using Windows Native Authentication (NTS) are done (https://docs.oracle.com/en/database/oracle/oracle-data-access-components/18.3/odpnt/featConnecting.html#GUID-51D1ADDB-D6… )

External user created in oracle database with domain name

On Client side:

Connection string has User Id=/

SQLNET.AUTHENTICATION_SERVICES is set to (NTS)

Client Trace:

TID:1   (CFG) (VER)      Oracle Data Provider for .NET, Managed Driver Version : 4.122.19.1

TID:1   (CFG) (VER)      Oracle Data Provider for .NET, Managed Driver Informational Version : 4.122.19.1:20190510

TID:1   (CFG) (.NET)     SQLNET.AUTHENTICATION_SERVICES : (NTS)

Oracle database trace shows failed logon attempt with username that doesn't contain domain name.

Using Oracle.ManagedDataAccess.Core 2.19.3 for our core apps results in same error (also logged on oracle database trace as user without domain name).

Is there something else that has to be done to make it work?

Alex Keh-Oracle

Are you using NTLM or Kerberos? Only the former is supported in managed ODP.NET.

Maria B.

We are using NTLM

Maria B.

Is it working for anyone when using domain name or is it a bug?

On client

SQLNET.AUTHENTICATION_SERVICES is set to (NTS), using NTLM

On server

OSAUTH_PREFIX_DOMAIN is default (true) and user created with domain name

Alex Keh-Oracle

Sounds like a bug as you appear to have everything correctly set. I would recommend opening up a service request with Oracle Support to find the root cause so that the bug can be fixed.