{"id":1491,"date":"2016-08-02T10:05:04","date_gmt":"2016-08-02T08:05:04","guid":{"rendered":"https:\/\/clemente.pamplona.name\/dba\/?p=1491"},"modified":"2023-02-20T11:22:29","modified_gmt":"2023-02-20T10:22:29","slug":"ora-28040-no-matching-authentication-protocol-al-subir-a-12c","status":"publish","type":"post","link":"http:\/\/clemente.pamplona.name\/dba\/ora-28040-no-matching-authentication-protocol-al-subir-a-12c\/","title":{"rendered":"ORA-28040: No matching authentication protocol  al subir a 12c"},"content":{"rendered":"<p>Hoy vamos a ver un error que podemos tener con determinadas conexiones JDBC desde clientes 10g.<\/p>\n<p>El principal problema es que el cliente de JDBC thin de la 10g usa el protocolo de autenticaci\u00f3n SHA-1, este protocolo no est\u00e1 permitido en la 12c, por lo que da el error.<br \/>\n<code><br \/>\nORA-28040: No matching authentication protocol<br \/>\n<\/code><br \/>\nLa soluci\u00f3n deber\u00eda de ser el uso de clientes 12c, ya que, hemos de tener en cuenta que <b>JDBC 10.1 drivers no est\u00e1n certificados con bases de datos  12c<\/b><\/p>\n<p>Existe un workarround para salir del paso, y es el configurar en el <i> SQLNET.ORA<\/i> del servidor el par\u00e1metro.<\/p>\n<pre>\r\n SQLNET.ALLOWED_LOGON_VERSION_SERVER=10\r\n SQLNET.ALLOWED_LOGON_VERSION_CLIENT=10\r\n<\/pre>\n<p>De esta manera conseguiremos que clientes antiguos funcionen, pero no debemos de perder de vista que esto solo debe de ser un workarround y la suma importancia de mantener todos los componentes de la base de datos certificados.<\/p>\n<p>Aunque la manera correcta de solucionarlo es desde el cliente<\/p>\n<pre>\r\n\r\nThe solution is to take out the \"-Doracle.jdbc.thinLogonCapability=o3\" java parameter from the application execution.\r\nFor example, if the next java command was used to execute the application:\r\njava -Doracle.jdbc.thinLogonCapability=o3 -cp .:ojdbc8.jar Application\r\nThen, it is necessary to take the \"-Doracle.jdbc.thinLogonCapability=o3\" parameter off from the command as follows:\r\njava -cp .:ojdbc8.jar Application\r\n<\/pre>\n<p>M\u00e1s informaci\u00f3n como siempre en metalink en :<\/p>\n<ul>\n<li> \u00abORA-28040: No Matching Authentication Protocol\u00bb After Database Upgrade To 19c (Doc ID 2748273.1)\n<li> Client \/ Server Interoperability Support Matrix for Different Oracle Versions (Doc ID 207303.1)\n<li>12c Database Alert.log File Shows The Message: Using Deprecated SQLNET.ALLOWED_LOGON_VERSION Parameter (Doc ID 2111876.1)\n<li>11g and Older: How To Use the Parameter SQLNET.ALLOWED_LOGON_VERSION Correctly (Doc ID 1304142.1)\n<li>11g and Older: How To Use the Parameter SQLNET.ALLOWED_LOGON_VERSION Correctly (Doc ID 1304142.1)\n<li>Error \u00abORA-28040: No matching authentication protocol\u00bb When Using SQLNET.ALLOWED_LOGON_VERSION (Doc ID 755605.1)\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Hoy vamos a ver un error que podemos tener con determinadas conexiones JDBC desde clientes 10g. El principal problema es que el cliente de JDBC thin de la 10g usa el protocolo de autenticaci\u00f3n SHA-1, este protocolo no est\u00e1 permitido &hellip; <a href=\"http:\/\/clemente.pamplona.name\/dba\/ora-28040-no-matching-authentication-protocol-al-subir-a-12c\/\">Sigue leyendo <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[60,66],"tags":[254,643,651,645,647,649],"class_list":["post-1491","post","type-post","status-publish","format-standard","hentry","category-12c","category-errores-ora","tag-12c","tag-ora-28040","tag-sqlnet","tag-sqlnet-allowed_logon_version","tag-sqlnet-allowed_logon_version_client","tag-sqlnet-allowed_logon_version_server"],"_links":{"self":[{"href":"http:\/\/clemente.pamplona.name\/dba\/wp-json\/wp\/v2\/posts\/1491","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/clemente.pamplona.name\/dba\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/clemente.pamplona.name\/dba\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/clemente.pamplona.name\/dba\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/clemente.pamplona.name\/dba\/wp-json\/wp\/v2\/comments?post=1491"}],"version-history":[{"count":7,"href":"http:\/\/clemente.pamplona.name\/dba\/wp-json\/wp\/v2\/posts\/1491\/revisions"}],"predecessor-version":[{"id":2331,"href":"http:\/\/clemente.pamplona.name\/dba\/wp-json\/wp\/v2\/posts\/1491\/revisions\/2331"}],"wp:attachment":[{"href":"http:\/\/clemente.pamplona.name\/dba\/wp-json\/wp\/v2\/media?parent=1491"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/clemente.pamplona.name\/dba\/wp-json\/wp\/v2\/categories?post=1491"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/clemente.pamplona.name\/dba\/wp-json\/wp\/v2\/tags?post=1491"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}