Troubleshooting ‘ORA-28041: Authentication protocol internal error’ change password 12c R2 DB
如果 Oracle client version 较低(<11.2.0.3),且数据库升级到 Oracle 12.2 并且应用了 April 2018 PSU 、18C 、19C databases 后, 当用户密码过期后,使用低版本的oracle client尝试修改用户密码时会遇到下面的错误:
ORA-28041: Authentication protocol internal error.
一客户最近数据库在升级12c R2后,图形堡垒客户端为11.2.0.1修改密码总是提示失败报错ORA-28041,总找DBA改密码这是不能忍的。注意如果 database version is 12.2.0.1 没有应用Apirl2018后PSU可能不存在该问题,Jan2018PSU是不存在这个问题. 当然这不是数据库升级的BUG, 根本原因是因为Oracle client版本和Oracle Server 的版本不兼容。之前我的BLOG有分享过其它如ORA-28040、 Ora-1017的问题,调整Server端向下兼容后连接数据库的问题可以解决.
- 升级12C注意事项: 连接失败 ORA-28040 ORA-1017
- Alert: SEC_CASE_SENSITIVE_LOGON and ORA-1017 after upgrade to 12.2 、18c、19c
The following table shows which client and which database version are supported.
Key:
Yes Supported ES Supported but fixes only possible for customers with Extended Support . MDS Supported, but fixes only possible for customer with a valid Market-Driven Support contract. Was Was a supported combination but one of the releases is no longer covered by any of Premier Support, Primary Error Correct support, Extended Support, nor Extended Maintenance Support. Fixes are no longer possible. No Has never been Supported
Specific Notes:
- #1 – See Note 207319.1
- #2 – An ORA-3134 error is incorrectly reported if a 10g client tries to connect to an 8.1.7.3 or lower server. See Note 3437884.8 .
- #3 – An ORA-3134 error is correctly reported when attempting to connect to this version.
- #4 – There are problems connecting from a 10g client to 8i/9i where one is EBCDIC based. See Note 3564573.8
- #5 – For connections between 10.2 (or higher) and 9.2 the 9.2 end MUST be at 9.2.0.4 or higher. Connections between 10.2 (or higher) and 9.2.0.1, 9.2.0.2 or 9.2.0.3 have never been supported.
- #6 – For connections between 11.1 (or higher) database server and 10.1 / 10.2 database server across a database link the 10g end MUST be at 10.1.0.5 / 10.2.0.2 (or higher) respectively in order to use PLSQL between those versions. (This does not apply to normal 11g clients to 10g database server only server to server and a few very specific client products, such as Oracle Forms). See Note 4511371.8 for more details.
- #7 – For database link connections between 11.1 (or higher) and 10.2 the 10g end MUST be at 10.2.0.2 (or higher) in order to use PLSQL between those versions. See Note 4511371.8 for more details.
- #8 – Attempting to connect from 9.2 to 12.1 will fail with an “ORA-28040: No matching authentication protocol” error.
- #9 – 11.2.0.3 or 11.2.0.4 only. We do not support any 11.2 client interoperability with Oracle Database Exadata Express Cloud Service
- #10 – Includes Oracle Database Exadata Express Cloud Service – see Note 2183770.1 for additional details.
- #11 – For the IBM z/OS platform only, Oracle will continue to test past 2014, at its discretion, new versions of the database running on non-z/OS platforms with the older 10.2 client running on z/OS. For more information, please refer to Note 461234.1 – Oracle Database on z/OS Support Status.
Client / Server Interoperability Support Matrix for Different Oracle Versions (Doc ID 207303.1)
通过Oracle的关于Oracle Server- Client认证列表可以看出连接Server Version 12c以后的版本需要Client Version 11.2.0.3 (or above version) . 升级oracle client到11.2.0.3以后可以解决,同时向下也可以兼容到Oracle Server 10g R2和 9i R2.
对不起,这篇文章暂时关闭评论。