Oracle Database B10772-01 Administrator's Manual page 442

Troubleshooting Entrust In Oracle Advanced Security
ORA-28890 Entrust Login Failed
(GUI does not display on the client)
F-14 Oracle Database Advanced Security Administrator's Guide
Invalid Entrust initialization file specified
Entrust Server Login program has not executed on the server
Action: To get more detail on the Entrust error, turn on tracing for SQL*Plus
and the trace output should indicate the Entrust failure code. Enable tracing by
specifying the following parameters in the sqlnet.ora file:
On the client:
TRACE_LEVEL_CLIENT=16
TRACE_DIRECTORY_CLIENT=<valid_client_directory_name>
TRACE_FILE_CLIENT=client
TRACE_UNIQUE_CLIENT=ON
On the server:
TRACE_LEVEL_SERVER=16
TRACE_DIRECTORY_SERVER=<valid_server_directory name>
TRACE_FILE_SERVER=server
TRACE_UNIQUE_SERVER=ON
Search for and locate the string IKMP in the generated trace file. Adjacent to this
string, error messages are listed that provide details about the problem you are
encountering. This detailed error code information is returned by the Entrust
API.
The following are examples of valid client directory names
Note:
for setting the TRACE_DIRECTORY_CLIENT or TRACE_
DIRECTORY_SERVER parameters in the sqlnet.ora file:
(UNIX) /tmp
(Windows) C:\TEMP
Cause: The WALLET_LOCATION parameter does not specify the Entrust
initialization file location in the client side sqlnet.ora file.