Our Oracle team figured out a solution. Include the following line in sqlnet.ora:

DISABLE_OOB=ON

That seems to have fixed the problem.