Oracle 12.2.0.1.0 - ORA-01017: invalid username/password; logon denied

[tobias_ptz]

Hi guys,

We have a very strange behavior, after upgrading to Ora 12, sometime the database login with OPS$ (domain user) is no more possible, we always get a ORA-01017 error.

Login with SYSTEM, SAPSR3 is working, OPS$ not.

I need to restart the Windows OracleService<SID> service to be able to login again with "sqlplus / as sysdba".

The oracle logs doesn't log anything about it and this kind of bug is in our whole landscape, one week this system, after 3 weeks another system.

Just want to ask if I'm alone, or did anyone hear about this before?

Thanks
Tobias

[tobias_ptz]

After some while and "infecting" some other systems, or systems twice and more, we speculate that this problem comes from the domain controller. (Kerberos Token)

Any one have this problem in a Linux environment?

[alicifci]

Hi Tobias,

We have this problem at DEV & QAS by one of our customers. Oracle 12.2 and Windows 2016. Also in this case they use domain user.

How sure are you that this problem comes from the domain controller (Kerberos Token?

Did you informed SAP and/or Oracle about this problem?

Very strange this..

Thnks in advance.

Ali Cifci
SAP Basis - Netherlands

[tobias_ptz]

Hi Ali,

Our AD-Team have checked logs on client and on domain controller side, but they found nothing. So I'm not sure anymore if it's a Kerberos thing.

Last week we hat that problem with one of our PRD systems, but not with the SDB of the PRD (On SDB with the same domain user login was possible). So it seems that the Oracle service has a problem, that runs on our systems as "Local System" account. But there is also no log entry on Oracle ..

Any idea?

BR

Tobias

[former_member256531]

Good day.

We also have such a problem. Windows Server 2012 R2, Oracle 12.2

With this error the backup stops working. When restarting only the database, strange errors appear:

ORA-20001: Latest xml inventory is not loaded into table

ORA-06512: at "SYS.DBMS_QOPATCH", line 2393

ORA-06512: at "SYS.DBMS_QOPATCH", line 811

ORA-06512: at "SYS.DBMS_QOPATCH", line 902

ORA-06512: at "SYS.DBMS_QOPATCH", line 2348

ORA-06512: at "SYS.DBMS_QOPATCH", line 774

ORA-06512: at "SYS.DBMS_QOPATCH", line 2373

SQL> SELECT version FROM v$timezone_file;

no rows selected

Everything is restored after restarting windows service OracleService<SID>

I posted a message in SAP. There is no solution yet.

Best regards,Vladimir

[JohnSkinner · Accepted solution]

Looks like it's an Oracle BUG. No fix as of yet
https://launchpad.support.sap.com/#/notes/2773486

[tobias_ptz · Accepted solution]

Thanks!

I guess it's the message from Vladimir.

Months ago and still just a workaround...

[former_member600855]

Hello All,

We have the exact same behaviour but on a fresh install oracle 12.2.0.1.0

Has SAP provided any solution?

Best regards,

Bruno

[tobias_ptz]

Hi,

not yet. We still have some problems with different Oracle versions 12.1. 12.2., different Windows versions 2012/2016 and different SAP kernel version 749, 753.

Until today I cannot find a note with a solution.

We are also not able to provide SAP a system for analysis, because backup is not running until they finished ..

But everytime it comes up some hours after a database backup. (backint)

[tan_michael]

Hi,

I would like to ask if your SAP system was a system copy from a source SAP system then upgraded the DB of target system to 12c? if that's the case, please do refer to below link.

https://archive.sap.com/discussions/message/16469377#16469377

[tobias_ptz]

Hi,

No, even PRD systems are affected...

And as you can see, they are able to connect to the database, we're not!

[JamesZ]

Hi Tobias,

The root cause probably lies on windows, but not clear, so there is not document from SAP yet.
when using ops$, oracle let windows do the Authentication, the problem like windows cannot do Authentication on behalf of oracle.

metalink (Doc ID 730067.1) mentioned <http://msdn.microsoft.com/en-us/library/aa370655(VS.85).aspx> may help to do further troubleshooting.

I suggest you to raise a support ticket to SAP or oracle, to find the root cause when the problem is occurring. This can help to find the real root cause. If you raised sap support incident, please let me know the incident number, I am very interested in.

Best regards,
James

[JamesZ]

Hi Tobias,

I assume the ops$ configuration is fine.
This issue has been seen several times, especially for windows on virtual machine. Please reboot OS and see whether the problem is solved.

Please try rebooting from both os level and virtual machine controller (if it is virtual machine).

Best regards,
James

[tobias_ptz]

Hi James,

Thanks for the feedback.

Our systems are running on physical servers, each instance on it's own server (Oracle+SAP).

Even with a reboot, after an undefined time from one day to another (after that the DB backup fails) this behavior comes back!

You said you see it several times, is it documented by SAP or Oracle?

Thanks!

BR Tobias