Solution : https://service.sap.com/sap/support/notes/620540 (SAP Service marketplace login required)
Summary :
This SAP Note provides a comprehensive authentication troubleshooting guide for Kerberos configuration in a client-server environment, particularly oriented towards database access with OPS$ users. The guide details the causes and solutions for typical errors like ORA-12638 and ORA-12631, which primarily concern credential retrieval failures and server-client time synchronization issues. The solution emphasizes using SQL*Net tracing and Oracle’s Advanced Security Administration guide as primary diagnostics tools. Key actions include setting the TRACE_LEVEL and TRACE_DIRECTORY parameters as well as correcting SQL*Net file settings and ensuring proper server timing alignments.
Key words :
terms ora-1004 ora-1017 ora-12631 ora-12638 ora-12641 connect kerberos ops$ reason, trace directory> trace_unique_client=ontrace_file_client=kerb_clienttrace_level_server=16trace_directory_server=<location, trace directory>trace_file_client=kerb_srvrdefault location, 3rd party tool called strace, tracing utility called truss, symptom authentication troubleshooting guide, oracle advanced security administrator', oracle server process runs, traces operation system calls, typical problems ora-12638
Related Notes :
| 614036 | Composite SAP Note: ORA-12631/ORA-12638 |
| 370278 | ORA-3113 when starting SQLPLUS or SVRMGRL |