Windows: DSA fails to start reporting "Access is denied. (0x5)" error

Products

• CA Directory

Issue/Introduction

On Windows OS, you may come across a problem where DSA fails to start and looking at the ALARM and/or TRACE log of the DSA, you noticed something like example below.

* [168] 20220326.221558.382 DSA_E1280 Error in initialization files
* [168] 20220326.221558.382 DSA_I1240 DSA shutting down
* [224] 20220326.221749.754 LOG: Unable to open log file 'logs\DSANAME_warn_20220326.log': Access is denied. (0x5)
? [224] 20220326.221749.754 ERROR : Syntax Error: Line 11 in C:\Program Files\CA\Directory\dxserver\config\logging\default.dxc near 'logs/$s_warn.log'
Unable to open log file
* [224] 20220326.221749.754 LOG: Unable to open log file 'logs\DSANAME_stats_20220326.log': Access is denied. (0x5)
? [224] 20220326.221749.754 ERROR : Syntax Error: Line 13 in C:\Program Files\CA\Directory\dxserver\config\logging\default.dxc near 'logs/$s_stats.log'
Unable to open log file
* [224] 20220326.221749.754 LOG: Unable to open log file 'logs\DSANAME_diag_20220326.log': Access is denied. (0x5)
? [224] 20220326.221749.754 ERROR : Syntax Error: Line 14 in C:\Program Files\CA\Directory\dxserver\config\logging\default.dxc near 'logs/$s_diag.log'
Unable to open log file
* [224] 20220326.221749.754 LOG: Unable to open log file 'logs\DSANAME_summary_20220326.log': Access is denied. (0x5)
? [224] 20220326.221749.754 ERROR : Syntax Error: Line 15 in C:\Program Files\CA\Directory\dxserver\config\logging\default.dxc near 'logs/$s_summary.log'

Commenting out the definition of above logs from LOGGING .dxc file fixes the problem and DSA starts successfully but you do require those logs to be created as it may contain vital information during future troubleshooting of any future problems.

Environment

Release : 14.1

Component : CA Directory

Resolution

Most probably you are missing 'LOCAL SERVICE' with full contorl on your 'logs' folder (e.g. %DXHOME%\logs).
Check and confirm via Windows Explorer -> right click on logs folder -> Properties -> Security tab

Here make sure you have the following:

If not, add 'LOCAL SERVICE' to this list with full control and after that DSA should start successfully generating all of the above mentioned log files.