ORA-28040: No matching authentication protocol in version 12.2.0.1 using 11g client

今天在体验Oracle 12.2.0.1的时候,遇到使用Oracle 11.2.0.1客户端连接数据库的时候报错ORA-28040 No Matching Authentication Protocol。
Oracle的版本是下载的exadata版本,文件为V839960-01.zip。
按照mos文档12c: ORA-28040 After Upgrade: No Matching Authentication Protocol (Doc ID 1957995.1)的描述,在数据库从11g升级到12c或者直接安装12c之后,从低版本的客户端或JDBC连接数据库后会报ORA-28040 No Matching Authentication Protocol错误。这个问题是由于在12c数据库中的默认设置造成的,涉及到的参数为:
SQLNET.ALLOWED_LOGON_VERSION_SERVER=n
SQLNET.ALLOWED_LOGON_VERSION_CLIENT=n
查阅了一下12.1和12.2.文档的关于SQLNET的说明,在两个版本中默认都是11,也就是允许11g的客户端进行连接,但是我的测试过程中使用11g的客户端依然报错,等到3月15日发行Linux版本再测试下。
对参数ALLOWED_LOGON_VERSION_CLIENT的说明,12.1中描述为

(1) 12a for Oracle Database 12c Release 1 (12.1) release 12.1.0.2 or later;
(2) 12 for the critical patch updates CPUOct2012 and later Oracle Database 11g authentication protocols (recommended);
(3) 11 for Oracle Database 11g authentication protocols (default);
(4) 10 for Oracle Database 10g authentication protocols;
(5) 8 for Oracle8i authentication protocol

12.2中描述为

(1) 12a for Oracle Database 12c Release 1 (12.1.0.2) or later (strongest protection)
Note:Using this setting, the clients can only authenticate using a de-optimized password version. For example, the 12C password version;
(2) 12 for the critical patch updates CPUOct2012 and later Oracle Database 11g authentication protocols (stronger protection)
Note:Using this setting, the clients can only authenticate using a password hash value that uses salt. For example, the 11G or 12C password versions;
(3) 11 for Oracle Database 11g authentication protocols (default);
(4) 10 for Oracle Database 10g authentication protocols;
(5) 8 for Oracle8i authentication protocol

不同版本客户端和服务器之间的支持矩阵说明请查阅MOS文档
Client / Server Interoperability Support Matrix for Different Oracle Versions (Doc ID 207303.1)。

此条目发表在12c, sqlnet分类目录。将固定链接加入收藏夹。

发表评论

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / 更改 )

Twitter picture

You are commenting using your Twitter account. Log Out / 更改 )

Facebook photo

You are commenting using your Facebook account. Log Out / 更改 )

Google+ photo

You are commenting using your Google+ account. Log Out / 更改 )

Connecting to %s