ORA 12170 & ORA 28040 错误及解决方法

RDBMS 12.0.2.1.0

client版本是11.2.0.4 

在client设置tnsnames.ora，连接12c的时候，提示ora 12170 连接超时错误，和ora 28040 错误。

解决方法
1 ora 12170 

关闭Linux服务器上的防火墙

2 ora 28040 
在服务器端sqlnet.ora里面设置以下即可。如果DB需要通过dblink连接，则SQLNET.ALLOWED_LOGON_VERSION_CLIENT也需要设置
#SQLNET.ALLOWED_LOGON_VERSION_CLIENT=8
SQLNET.ALLOWED_LOGON_VERSION_SERVER=8


参考文档

https://docs.oracle.com/database/121/NETRF/sqlnet.htm#NETRF2010

SQLNET.ALLOWED_LOGON_VERSION_CLIENT

Purpose

To set the minimum authentication protocol allowed for clients, and when a server is acting as a client, such as connecting over a database link, when connecting to Oracle Database instances.

Usage Notes

The term VERSION in the parameter name refers to the version of the authentication protocol, not the Oracle Database release.

If the version does not meet or exceed the value defined by this parameter, then authentication fails with an ORA-28040: No matching authentication protocol error.

See Also:

Oracle Database Security Guide

Values

• 12a for Oracle Database 12c Release 1 (12.1) release 12.1.0.2 or later

• 12 for the critical patch updates CPUOct2012 and later Oracle Database 11g authentication protocols (recommended)

• 11 for Oracle Database 11g authentication protocols (default)

• 10 for Oracle Database 10g authentication protocols

• 8 for Oracle8i authentication protocol

Default

11

Example

If an Oracle Database 12c database hosts a database link to an Oracle Database 10g database, then the SQLNET.ALLOWED_LOGON_VERSION_CLIENT parameter should be set as follows in order for the database link connection to proceed:

SQLNET.ALLOWED_LOGON_VERSION_CLIENT=10

SQLNET.ALLOWED_LOGON_VERSION_SERVER

Purpose

To set the minimum authentication protocol allowed when connecting to Oracle Database instances.

Usage Notes

The term VERSION in the parameter name refers to the version of the authentication protocol, not the Oracle Database release.

If the client version does not meet or exceed the value defined by this parameter, then authentication fails with an ORA-28040: No matching authentication protocol error or an ORA-03134: Connections to this server version are no longer supported error.

A setting of 8 permits most password versions, and allows any combination of the DBA_USERS.PASSWORD_VERSIONS values 10G, 11G, and 12C.

A SQLNET.ALLOWED_LOGON_VERSION_SERVER setting of 12a permits only the 12C password version.

.....................

end