Microsoft Dynamics AX (Archived)

Login failed for dixf user

(0) Share

Report

Posted on by Arkadia2

427

Hello everyone,

Strange problem started occuring in our pre-prod environment. AX 2012 R3 cu8.

This error now occurs when trying to get staging data or simply previewing a sample file in the group definition. It is thrown from the class DMFStagingWriter, method showPreview, on line 370:

returnRec = dmfEntityProxy.ShowPreview(dMFEntity);

Monday afternoon it was working fine and dandy.

Went to work on something else in the DEV environment, when I came back to testing the budget upload Tuesday afternoon in the PRE-PROD environment, I started getting the permission error.

I have checked with the sytem administrators and no privilege has been revoked to this system account.

I have restarted the DIXF service on the pre-prod SQL server, making sure the password was still ok.

I even granted full access privileges to the import source folder, even though it was working previously without the account being specifically authorized to the folder.

I am curious as to why the dixf account is the one being used to read the source file? I guess its related to SSIS.

I am seriously quite at loss on what could have changed and I'am a little bit worried about the same situation starting to happen in the PRODUCTION environment.

I also read the few threads on a similar subject here and elsewhere without being able to find the solution.

If anyone can share some advice!

Regards,

Eric

*This post is locked for comments

I have the same question (0)

All responses (19)

Answers (0)

nmaenpaa 101,160 Moderator on at

Like (0)

Report

Seems that someone changed the password of svc_dixfprod account, or the password is expired.

You should use non-expiring passwords in your service accounts.

Was this reply helpful? Yes No
Arkadia2 427 on at

Like (0)

Report

Hello Nikolaos,

Thanks for answering. Unfortunetaly, the password has not expired or been changed, I made sure by re-entering the credentials when launching the DIXF service.

Was this reply helpful? Yes No
André Arnaud de Cal... 300,896 Super User 2025 Season 2 on at

Like (0)

Report

Hi Eric,

Are you using the same user and domain on all your environments? Was the database refreshed from production with other domain settings?

Was this reply helpful? Yes No
Arkadia2 427 on at

Like (0)

Report

Hello André,

Thanks for your reply!

We have a different dixf account for each environment. No, the PRE-PROD environment was not refreshed recently.

It *should* be system admin related but I've been told that nothing had changed regarding the dixf pre-prod user account. I'm trying to figure out how AX knows to use a specific account. I don't see any parameters which links dixf with an account.

On the SQL server, the dixf framework service is run by the svc_dixfppd, that's the only link I can see.

In the showPreview method of the DMFStagingWriter class, the dmfEntityProxy object is defined as follow:

dmfEntityProxy = new CLRObject('Microsoft.Dynamics.AX.Framework.Tools.DMF.ServiceProxy.DmfEntityProxy')

and it is later in the code which this lines now fails:

returnRec = dmfEntityProxy.ShowPreview(dMFEntity);

Those are internal dll calls, I have no idea how I could trace to see exactly where is the show stopper. There are some temp files being created in the DIXF shared working directory before the call to showPreview, so I know that the dixf account has at least writing access to this folder. (The DIXF shared working directory is defined in DIXF-Setup-Data import/export framework parameters and I do have the green check mark next to the validate service account access to directory)

I have no idea how AX knows to use the svc_dixfppd account. In system administration, can there be a conflict in in the inbound ports services and application Integration Framework that could break the dixf permissions? I have also stopped and restarted DMFEntityExecutionStatusService and DMFProcessingGrpService with no luck. The DMFService has never been used.

Any suggestions is appreciated!

Was this reply helpful? Yes No
André Arnaud de Cal... 300,896 Super User 2025 Season 2 on at

Like (0)

Report

Hi Eric,

Thanks for the additional details. There should be a change somewhere. Have you also tried to find related Windows event logs on the AOS server and SSIS server?

Was this reply helpful? Yes No
Arkadia2 427 on at

Like (0)

Report

Hello André,

Well don't thank me! I am the one who is very grateful that you take some time to give me suggestions!

No, there`s never been anything logged either on the aos or the sql server (the database, ssrs and ssis are hosted on the same machine in the preprod environment).

I am somewhat suspicious also of the error message; I have seen a few times where AX reports an error which is not the real culprit. But since all the action happens in program extensions, I don't know how to figure out exactly what triggers the exception.

As a test, I changed the code in DMFStagingWriter.showPreview(), juste before the line which cause the exception:

returnRec = dmfEntityProxy.ShowPreview(dMFEntity);

I added the code which is used in the setup form to validate the service account rights:

[checkSharedPath, serviceSharePath] = DMFParameters::validateSharedFileFolderPath(dmfParameters.SharedFolderPath);

and it returns true for both share path. Really puzzling!

Regards,

Eric

Was this reply helpful? Yes No
André Arnaud de Cal... 300,896 Super User 2025 Season 2 on at

Like (0)

Report

Hi Eric,

Do you have multiple AD domains in your network? I have seen issues at the time there is no two-way trust.

Was this reply helpful? Yes No
Arkadia2 427 on at

Like (0)

Report

Hello André,

I'll post the answer to your question early next week. I am not knowledgeable of our AD setup. I think we have multiple domains but whether something would have changed which would have block one single account, I have no clue.

Was this reply helpful? Yes No
A.Prasanna 8,223 on at

Like (0)

Report

You can try below steps temporerly to find out where is the issue

Grant Local Administrative rights to Dixf Service Account

Grant SysAdmin Permission to Dixf Sevice Account on SQL Server

Change UAC level

Hope this will help !

Thanks & Regards,

Amith Prasanna

Was this reply helpful? Yes No
Arkadia2 427 on at

Like (0)

Report

Hello André,

No we don't have multiple active domains. I had a consultant look at the problem yesterday and he's puzzled after reviewing what I had checked and trying a few things. Among which the most interesting was to configure the test environment using the svc_dixfppd account... andeverything worked correctly. I now think that the error message may be a mislead...

I will do a full recompile of X++ code tonight, followed by a full CIL (only had done the full CIL). Will see what happens. Otherwise, we will reload the environment in two weeks from the PROD environment and see how it goes.

I will post back with the results

Was this reply helpful? Yes No