Windows server 2008 r2 and kerberos: how to fix "TNS-12641: Authentication service failed to initialize" error?

Question

Oracle

Hello! There is a sl. error TNS-12641: Authentication service failed to initialize.
The sqlnet.ora file on the server:

SQLNET.AUTHENTICATION_SERVICES= (NTS)
NAMES.DIRECTORY_PATH= (TNSNAMES, EZCONNECT)
SQLNET.KERBEROS5_KEYTAB=c:\app\kerberos\srvc.keytab
SQLNET.KERBEROS5_CONF=c:\app\kerberos\krb5.ini
SQLNET.KERBEROS5_CONF_MIT=TRUE
SQLNET.AUTHENTICATION_KERBEROS5_SERVICE=orcl.vip.cbr
SQLNET.AUTHENTICATION_SERVICES=(BEQ,KERBEROS5)

ADR_BASE = C:\app\product\11.2.0
DIAG_ADR_ENABLED = ON
TRACE_LEVEL_CLIENT = SUPPORT
TRACE_UNIQUE_CLIENT = on
TRACE_LEVEL_SERVER = SUPPORT
TRACE_FILE_CLIENT = client
LOG_FILE_CLIENT = logfile.log
TRACE_FILE_SERVER = server

The same file on the client:

#SQLNET.AUTHENTICATION_SERVICES=
SQLNET.KERBEROS5_CC_NAME=OSMSFT://
SQLNET.AUTHENTICATION_SERVICES= (beq,kerberos5)
SQLNET.KERBEROS5_CONF = C:\kerberos\krb5.ini
SQLNET.KERBEROS5_CONF_MIT = true

TRACE_LEVEL_OKINIT = 16
TRACE_UNIQUE_OKINIT = on
TRACE_DIRECTORY_OKINIT = c:\tmp
TRACE_LEVEL_CLIENT = SUPPORT
TRACE_UNIQUE_CLIENT = on
TRACE_LEVEL_SERVER = SUPPORT
TRACE_DIRECTORY_CLIENT = c:\tmp
TRACE_FILE_CLIENT = client
LOG_FILE_CLIENT = logfile.log
TRACE_DIRECTORY_SERVER = c:\tmp
TRACE_FILE_SERVER = server
LOG_DIRECTORY_CLIENT = c:\tmp
LOG_DIRECTORY_SERVER = c:\tmp
DIAG_ADR_ENABLED = OFF