ORA-01017, SP2-0306, or SP2-0157 Encountered During Oracle VDB Provision (KBA8724)

Issue

When provisioning an Oracle VDB, the following errors may be encountered shortly after initiating the Provision or Refresh job:

ERROR : ORA-01017: invalid username/password; logon denied

ERROR : Enter user-name: SP2-0306: Invalid option.

ERROR : SP2-0157: unable to CONNECT to ORACLE after 3 attempts, exiting SQL*Plus

These errors may be encountered on an existing or new Oracle Environment.

Applicable Delphix Versions

Click here to view the versions of the Delphix engine to which this article applies

Major Release	All Sub Releases
6.0	6.0.0.0, 6.0.1.0, 6.0.1.1, 6.0.2.0, 6.0.2.1, 6.0.3.0, 6.0.3.1, 6.0.4.0, 6.0.4.1, 6.0.4.2, 6.0.5.0, 6.0.6.0, 6.0.6.1, 6.0.7.0, 6.0.8.0, 6.0.8.1, 6.0.9.0, 6.0.10.0, 6.0.10.1, 6.0.11.0
5.3	5.3.0.0, 5.3.0.1, 5.3.0.2, 5.3.0.3, 5.3.1.0, 5.3.1.1, 5.3.1.2, 5.3.2.0, 5.3.3.0, 5.3.3.1, 5.3.4.0, 5.3.5.0, 5.3.6.0, 5.3.7.0, 5.3.7.1, 5.3.8.0, 5.3.8.1, 5.3.9.0
5.2	5.2.2.0, 5.2.2.1, 5.2.3.0, 5.2.4.0, 5.2.5.0, 5.2.5.1, 5.2.6.0, 5.2.6.1
5.1	5.1.0.0, 5.1.1.0, 5.1.2.0, 5.1.3.0, 5.1.4.0, 5.1.5.0, 5.1.5.1, 5.1.6.0, 5.1.7.0, 5.1.8.0, 5.1.8.1, 5.1.9.0, 5.1.10.0
5.0	5.0.1.0, 5.0.1.1, 5.0.2.0, 5.0.2.1, 5.0.2.2, 5.0.2.3, 5.0.3.0, 5.0.3.1, 5.0.4.0, 5.0.4.1, 5.0.5.0, 5.0.5.1, 5.0.5.2, 5.0.5.3, 5.0.5.4

Resolution

Delphix operations leverage Oracle Bequeath connectivity to communicate with the database instances, which leverages OS user authentication. In some configurations, the sqlnet.ora file may be configured with restrictive authentication parameters that prevent login to the database instance with native OS user authentication. This is configured using the optional SQLNET.AUTHENTICATION_SERVICES parameter.

Delphix operations require this parameter to be unset (not present in the sqlnet.ora file), or including all or beq methods.  In the following example, BEQ is included as well as TCP, TCPS, and NTS (Windows native OS authentication), and would be expected to function.

SQLNET.AUTHENTICATION_SERVICES = (BEQ,TCP,TCPS,NTS)

In this example, the BEQ parameter is missing, and therefore bequeath connections would fail.

SQLNET.AUTHENTICATION_SERVICES = (TCP,TCPS)