Inbound AIF: Logon Failure

Question Status

Verified
Lyka Tasis asked a question on 2 Mar 2013 3:35 AM

Hello,

I have a custom service I use to import data. I'm having difficulties since its throwing the following error in the Queue Manager:

The request failed with the following error: Failed to logon to Microsoft Dynamics AX.
View the exception log for more details.

I tried Refreshing the WCF Configuration in the Configuration Utility, but no luck. 

Any ideas?

Thanks,

Lyka Tasis

Reply
Mukesh Hirwani responded on 2 Mar 2013 10:59 AM

Are u sending user id to create the record.. Make user the User you provide has correct set of permissions.

Reply
Lyka Tasis responded on 2 Mar 2013 11:06 PM

Hi Mukesh,

I only identify the Action for my custom service. The Message Id, SourceEndpoint, DestinationEndpoint, and SourceEndpointUser - I did not specify. Plus, I am only testing my service via Job.

Reply
Mukesh Hirwani responded on 3 Mar 2013 2:03 AM

which adapter u r using??

Reply
Tommy Skaue responded on 3 Mar 2013 8:29 AM

Is this a custom service you intend to use outside the local network domain?

Reply
Verified Answer
Lyka Tasis responded on 5 Mar 2013 10:09 PM

Hi Mukesh,

I am using File System Adapter.

Hi Tommy Skaue,

No, I don't intend to use this outside the local network domain. But thanks to the question, it serves as my lead.

I have a standalone AX 2012 in my laptop, I am not connected to our domain in the time of testing and I guess that's the reason why the BC service account cannot logon that time.

Reply
Suggested Answer
Mukesh Hirwani responded on 5 Mar 2013 10:13 PM

Next to adapter field there is a configure button, Adapter configuration form will come up. Check Use default owner for Administrators group and select Admin in the field list. Reactivate port n try..

Reply
Suggested Answer
absolute5842 responded on 31 Jul 2015 1:06 PM

I had the same issue where the services had a logon failure. I tried to restart the AOS service and it failed so I updated the account logon and it fixed AIF.

Reply
psined responded on 26 Sep 2015 10:01 AM

I got the same issue, except when calling a custom service on Basic inbound net.tcp port from outside the local domain. It used to work great cross-domain for several months until about a few weeks ago, when it stopped with the dreaded "Failed to logon to Microsoft Dynamics AX" error. So now it only appears to work (with exactly same binding settings in the client app.config) from within the local domain. All this takes place in AX 2012 R2.

What are the implications of calling an AIF inbound port from outside the local network domain and what considerations should be made while setting such inbound port up?

P.S. The stack trace on the client is as follows:

System.ServiceModel.FaultException: Failed to logon to Microsoft Dynamics AX.

Server stack trace: 
at System.ServiceModel.Channels.ServiceChannel.HandleReply(ProxyOperationRuntime operation, ProxyRpc& rpc)
at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
Reply
psined responded on 28 Sep 2015 7:07 PM

I was able to fix my issue with cross-environment access. For those who are interested the issue had nothing to do with AX AIF; it rather had to do with SIDs of the accounts being out of sync. In other words while the login/domain/password for the account have appeared the same between the environments, the SIDs turned to be different. From what I understand WCF RSA-encrypts messages with SID being part of the key hash. This explains why it has worked for a little while until lately - as turns out someone has dropped the service account from the AD in the target environment and recreated it from scratch. As soon as we matched the SIDs between the environments the issue was no longer. 

Reply
Verified Answer
Lyka Tasis responded on 5 Mar 2013 10:09 PM

Hi Mukesh,

I am using File System Adapter.

Hi Tommy Skaue,

No, I don't intend to use this outside the local network domain. But thanks to the question, it serves as my lead.

I have a standalone AX 2012 in my laptop, I am not connected to our domain in the time of testing and I guess that's the reason why the BC service account cannot logon that time.

Reply
Suggested Answer
Mukesh Hirwani responded on 5 Mar 2013 10:13 PM

Next to adapter field there is a configure button, Adapter configuration form will come up. Check Use default owner for Administrators group and select Admin in the field list. Reactivate port n try..

Reply
Suggested Answer
absolute5842 responded on 31 Jul 2015 1:06 PM

I had the same issue where the services had a logon failure. I tried to restart the AOS service and it failed so I updated the account logon and it fixed AIF.

Reply