Skip to Main Content

DevOps, CI/CD and Automation

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

Oracle 12c for Windows download aborts after about 30 minutes

Barbara BoehmerJul 16 2013 — edited Jul 26 2013

Every attempt to download Oracle 12c for Windows file1 starts out downloading just fine, then aborts after about 30 minutes and leaves a download-fail-1505220.html file that says,


"Sorry! In order to download products from Oracle Technology Network you must agree to the OTN license terms. Be sure that... Your browser has "cookies" and JavaScript enabled. You clicked on "Accept License" for the product you wish to download. You attempt the download within 30 minutes of accepting the license. From here you can go... Back to Previous Page Site Map OTN Homepage".

When I attempt this, I am logged in to OTN, everything is enabled, I accept the license agreement, and immediately begin the download.  I am attempting the download using the FireFox 22.0 browser with the DownThemAll 2.0.16 extension download utility via Verizon Wireless 7.2.1.2 mobile broadband.  This combination has worked quickly and enabled resuming of interrupted downloads of many other things.  My operating system is Windows 7 Professional 64 bit.  I currently have Oracle 11g installed and I downloaded that in the same fashion a long time ago.

This post has been answered by Billy Verreynne on Jul 23 2013
Jump to Answer

Comments

807578
This error suggests a problem with your kerberos config file, specifically a mismatch between supported encryption tpyes. Have you specified the default_tkt_enctypes and/or default_tgs_enctypes keywords in your krb5.conf file? AFAIK, the only common encryptions between MIT krb5 and AD is "des-cbc-crc" and "des-cbc-md5"; if you have something different, this will fail.

Also, I don't know if this applies, but I found this:

Cause 2: This exception is thrown when using native ticket cache on some Windows platforms. Microsoft has added a new feature in which they no longer export the session keys for Ticket-Granting Tickets (TGTs). As a result, the native TGT obtained on Windows has an "empty" session key and null EType. The effected platforms include: Windows Server 2003, Windows 2000 Server Service Pack 4 (SP4) and Windows XP SP2.

Solution 2: You need to update the Windows registry to disable this new feature. The registry key allowtgtsessionkey should be added--and set correctly--to allow session keys to be sent in the Kerberos Ticket-Granting Ticket.

On the Windows Server 2003 and Windows 2000 SP4, here is the required registry setting:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\Kerberos\Parameters
Value Name: allowtgtsessionkey
Value Type: REG_DWORD
Value: 0x01 ( default is 0 )

By default, the value is 0; setting it to "0x01" allows a session key to be included in the TGT.

Here is the location of the registry setting on Windows XP SP2:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\Kerberos\
Value Name: allowtgtsessionkey
Value Type: REG_DWORD
Value: 0x01

from this page: http://java.sun.com/j2se/1.5.0/docs/guide/security/jgss/tutorials/Troubleshooting.html

Some other possibly useful urls:
http://docs.sun.com/source/819-4309-10/en-us/base/standard/activedir_auth_enabling.html
http://docs.sun.com/app/docs/doc/816-5174/6mbb98ugh?a=view
http://java.sun.com/j2se/1.5.0/docs/guide/security/jgss/tutorials/Troubleshooting.html

Hope this helps.
807578
I think it might be the scond cause. I had already tried various combinations of "des-cbc-crc" and "des-cbc-md5".

I will ask our IT services guys who look after the AD to see if the can apply this registry fix.

Cheers

Anthony Worrall
1 - 2
Locked Post
New comments cannot be posted to this locked post.

Post Details

Locked on Aug 23 2013
Added on Jul 16 2013
19 comments
17,055 views