Vlan interface "unknown protocol drops"

Hello
I have a satellite office that connects via VPN back to my Corporate office.
The VPN is terminated on an Cisco 891.
I have received complaints from the user's there that their Citrix session hangs on them. They can then reconnect the session and
find the session was still going as they started back where they left off. There are several pc's that experiewnce the same issue.
The Citrix server has been checked out. The PC's have been checked out and re-imaged just to make sure.
I see on the Vlan interfacfe on the 9891 there are alot of unknown protocol drops.
What does this mean and could it be the cause of the session hang?
Vlan10 is up, line protocol is up
Hardware is EtherSVI, address is 4403.abcd.efgh (bia 4403.abcd.efgh)
Internet address is 10.x.221.1/24
MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
     reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive not supported
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:05, output never, output hang never
Last clearing of "show interface" counters 22:43:53
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 1000 bits/sec, 1 packets/sec
5 minute output rate 1000 bits/sec, 1 packets/sec
     218197 packets input, 33432444 bytes, 0 no buffer
     Received 6568 broadcasts (0 IP multicasts)
     0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
     189384 packets output, 79892307 bytes, 0 underruns
     0 output errors, 0 interface resets
     7433 unknown protocol drops
     0 output buffer failures, 0 output buffers swapped out

Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
If you're running Citrix across a VPN, that crosses the Internet (?), I would be first concerned about transient latency and/or packet drops. I would also be concerned whether your VPN has been configured to avoid packet fragmentation.

Similar Messages

Unknown protocol drops

We started using Cisco 3850 switches. We are seeing unknown protocol drops on 10gb and 1gb uplinks. We have 3750x switches that have the same config. The 3750s are not showing these drops. What would cause these unknown protocol drops? It does not appear to be a fiber or SFP issue. And it does not seem to be affecting the normal traffic.
Sent from Cisco Technical Support iPhone App

Hello lindseye444,
Please have a look at this bug:
https://tools.cisco.com/bugsearch/bug/CSCuh47950/?reffering_site=dumpcr
Symptom:
when a routing protocol packet (such as but not limited to EIGRP) is received on a 3850 configured as an L2 device, interfaces receiving these packets will increment "unknown protocol drops"
This is a cosmetic issue and will not affect the routing protocols involved.
Conditions:
EIGRP or other routing protocol packets are received by a Catalyst 3850 that is configured as an Layer2 switch.
Workaround:
Once an SVI (switch virtual interface: for example "interface vlan 10") with an IP address is configured on the 3850 for the vlan in question the "unknown protocol drops" counter stops incrementing
Further Problem Description:
L3 routing protocol packets might be punted to CPU received on a L2 switchport, if no SVI is presented, unknown protocol drops will increase on the physical interface.
Regards.

Unknown protocol drops on switches

Hai,
I am facing a problem with cisco 3850 switch.
4 3850 switches are stacked this is the ios version.
Switch Ports Model              SW Version        SW Image              Mode
     1 56    WS-C3850-48P       03.03.01SE        cat3k_caa-universalk9 INSTALL
*    2 56    WS-C3850-48P       03.03.01SE        cat3k_caa-universalk9 INSTALL
     3 56    WS-C3850-48P       03.03.01SE        cat3k_caa-universalk9 INSTALL
     4 56    WS-C3850-48P       03.03.01SE        cat3k_caa-universalk9 INSTALL
On all interfaces we are getting un known protocol drops.
This is happening only for the ports connected to Cisco IP Phone.
sh int gigabitEthernet 1/0/6
GigabitEthernet1/0/6 is up, line protocol is up (connected)
Hardware is Gigabit Ethernet, address is 20bb.c001.b186 (bia 20bb.c001.b186)
MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
     reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 1000Mb/s, media type is 10/100/1000BaseTX
input flow-control is off, output flow-control is unsupported
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:09, output never, output hang never
Last clearing of "show interface" counters 2d20h
Input queue: 0/2000/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 20000 bits/sec, 26 packets/sec
5 minute output rate 582000 bits/sec, 54 packets/sec
     1660799 packets input, 1143477736 bytes, 0 no buffer
     Received 11299 broadcasts (9112 multicasts)
     0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
     0 watchdog, 9112 multicast, 0 pause input
     0 input packets with dribble condition detected
     2420321 packets output, 1763948037 bytes, 0 underruns
     0 output errors, 0 collisions, 0 interface resets
******943 unknown protocol drops**********************************************
     0 babbles, 0 late collision, 0 deferred
     0 lost carrier, 0 no carrier, 0 pause output
     0 output buffer failures, 0 output buffers swapped out
I tried to troubleshoot the issue with dtp,lldp,cdp...etc...seems that is not the issue
What could be the issue? any clue?
Regards
Deva

Transmit                  GigabitEthernet1/0/6   Receive
            0 Total bytes                           0 Total bytes
            0 Unicast frames                        0 Unicast frames
            0 Unicast bytes                         0 Unicast bytes
            0 Multicast frames                      0 Multicast frames
            0 Multicast bytes                       0 Multicast bytes
            0 Broadcast frames                      0 Broadcast frames
            0 Broadcast bytes                       0 Broadcast bytes
            0 System FCS error frames               0 IpgViolation frames
            0 MacUnderrun frames                    0 MacOverrun frames
            0 Pause frames                          0 Pause frames
            0 Cos 0 Pause frames                    0 Cos 0 Pause frames
            0 Cos 1 Pause frames                    0 Cos 1 Pause frames
            0 Cos 2 Pause frames                    0 Cos 2 Pause frames
            0 Cos 3 Pause frames                    0 Cos 3 Pause frames
            0 Cos 4 Pause frames                    0 Cos 4 Pause frames
            0 Cos 5 Pause frames                    0 Cos 5 Pause frames
            0 Cos 6 Pause frames                    0 Cos 6 Pause frames
            0 Cos 7 Pause frames                    0 Cos 7 Pause frames
            0 Oam frames                            0 OamProcessed frames
            0 Oam frames                            0 OamDropped frames
            0 Minimum size frames                   0 Minimum size frames
            0 65 to 127 byte frames                 0 65 to 127 byte frames
            0 128 to 255 byte frames                0 128 to 255 byte frames
            0 256 to 511 byte frames                0 256 to 511 byte frames
            0 512 to 1023 byte frames               0 512 to 1023 byte frames
            0 1024 to 1518 byte frames              0 1024 to 1518 byte frames
            0 1519 to 2047 byte frames              0 1519 to 2047 byte frames
            0 2048 to 4095 byte frames              0 2048 to 4095 byte frames
            0 4096 to 8191 byte frames              0 4096 to 8191 byte frames
            0 8192 to 16383 byte frames             0 8192 to 16383 byte frames
            0 16384 to 32767 byte frame             0 16384 to 32767 byte frame
            0 > 32768 byte frames                   0 > 32768 byte frames
            0 Late collision frames                 0 SymbolErr frames
            0 Excess Defer frames                   0 Collision fragments
            0 Good (1 coll) frames                  0 ValidUnderSize frames
            0 Good (>1 coll) frames                 0 InvalidOverSize frames
            0 Deferred frames                       0 ValidOverSize frames
            0 Gold frames dropped                   0 FcsErr frames
            0 Gold frames truncated
            0 Gold frames successful
            0 1 collision frames
            0 2 collision frames
            0 3 collision frames
            0 4 collision frames
            0 5 collision frames
            0 6 collision frames
            0 7 collision frames
            0 8 collision frames
            0 9 collision frames
            0 10 collision frames
            0 11 collision frames
            0 12 collision frames
            0 13 collision frames
            0 14 collision frames
            0 15 collision frames
            0 Excess collision frames
LAST UPDATE 120931740 msecs AGO

UCS C 240M3 Unknown Protocol Drops

I have a UCS server running NIC teaming to a 3750X stack. I am getting unknown protocol drops on one of the 10 Gig interfaces. The other runs fine. I am wondering if anyone else has run into this issue and what can be done to resolve it.
Thank you
Dave

Hi, Leo :
I don't think it is a duplicate posts ,because my configruration is different , mine is WPA2 with AES-CCM. still has the drop issue.
and I provide more infomation .
thank you .

Unknown protocol drops with AP2700

We've been deploying some AP 2700 within our offices and been observing some "unknown protocol drops" on the switchports where the AP's are connected.
The AP's are associated to a 7500 wireless controller, running 8.0.100.0 code. The AP's are in lightwight configuration with flexconnect configuration (4 vlans/SSID) associated.
On the switch port, the port has the following configuration :
description Cisco AP
switchport mode trunk
load-interval 30
spanning-tree portfast
I also specified the allowed vlans, based on the vlans that were mapped on the Flexconnect group and I still get some unknown protocol drops on the AP ports.
Does anybody know what this could relate to ?

See whether those are related to jumbo frames ?
https://tools.cisco.com/bugsearch/bug/CSCun12965
HTH
Rasika
**** Pls rate all useful responses ****

Why i get 1356 unknown protocol drops on my 2951 router ?

2951 router is giving a lot of drops when pinging and when i check the output of "sh inter"command i only find 1356 unknown protocol drops.

2951 router is giving a lot of drops when pinging and when i check the output of "sh inter"command i only find 1356 unknown protocol drops.

Service-policy on Vlan interface failed

Hi, All!
This is my configuration:
class-map match-any voip_control_trust-CMAP
match ip dscp cs3
match ip dscp af31
class-map match-any voip_rtp_trust-CMAP
match ip dscp ef
class-map match-any internetwork-cntrl-CMAP
match ip dscp cs6
policy-map output_qos-PMAP
class voip_rtp_trust-CMAP
priority 56
class voip_control_trust-CMAP
bandwidth percent 2
class internetwork-cntrl-CMAP
bandwidth percent 5
class class-default
fair-queue
random-detect
cisco(config)#int Vlan 2
cisco(config-if)#service-policy output output_qos-PMAP
Configuration failed!
It was tested on 877, 871, 871W, 877W with ios c870-advipservicesk9-mz.124-15.T5.bin, c870-advipservicesk9-mz.124-15.T8.bin, c870-advipservicesk9-mz.124-15.T10.bin, c870-advipservicesk9-mz.124-15.T11.bin, c870-advipservicesk9-mz.124-24.T2.bin
Strange error. Does anybody know what's the problem?

Ok, i tried to make workaround solution:
policy-map OUTPUT_QOS_PMAP
class VOIP_RTP_TRUST_CMAP
    priority 56
class VOIP_CTRL_TRUST_CMAP
    bandwidth percent 2
class INETWORK-CTRL-CMAP
    bandwidth percent 5
class class-default
    fair-queue
     random-detect
service-policy OUTPUT_QOS_PMAP
service-policy output OUTPUT_QOS_PMAP
interface Vlan2
description *** WAN SVI ***
bandwidth 256
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip virtual-reassembly
bridge-group 1
end
interface BVI1
description *** WAN BVI ***
bandwidth 256
ip address 10.96.0.57 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip virtual-reassembly
service-policy output OUTPUT_QOS_PMAP
end
sh policy-map interface
BVI1
Service-policy output: OUTPUT_QOS_PMAP
    queue stats for all priority classes:
      queue limit 64 packets
      (queue depth/total drops/no-buffer drops) 0/0/0
      (pkts output/bytes output) 0/0
    Class-map: VOIP_RTP_TRUST_CMAP (match-any)
      0 packets, 0 bytes
      5 minute offered rate 0 bps, drop rate 0 bps
      Match: ip dscp ef (46)
        0 packets, 0 bytes
        5 minute rate 0 bps
      Priority: 56 kbps, burst bytes 1500, b/w exceed drops: 0
    Class-map: VOIP_CTRL_TRUST_CMAP (match-any)
      0 packets, 0 bytes
      5 minute offered rate 0 bps, drop rate 0 bps
      Match: ip dscp cs3 (24)
        0 packets, 0 bytes
        5 minute rate 0 bps
      Match: ip dscp af31 (26)
        0 packets, 0 bytes
        5 minute rate 0 bps
      Queueing
      queue limit 64 packets
      (queue depth/total drops/no-buffer drops) 0/0/0
      (pkts output/bytes output) 0/0
      bandwidth 2% (5 kbps)
    Class-map: INETWORK-CTRL-CMAP (match-any)
      6 packets, 896 bytes
      5 minute offered rate 0 bps, drop rate 0 bps
      Match: ip dscp cs6 (48)
        6 packets, 896 bytes
        5 minute rate 0 bps
      Match: access-group name IKE
        0 packets, 0 bytes
        5 minute rate 0 bps
      Queueing
      queue limit 64 packets
      (queue depth/total drops/no-buffer drops) 5/0/0
      (pkts output/bytes output) 6/1120
      bandwidth 5% (12 kbps)
    Class-map: class-default (match-any)
      11 packets, 660 bytes
      5 minute offered rate 0 bps, drop rate 0 bps
      Match: any
      Queueing
      queue limit 64 packets
      (queue depth/total drops/no-buffer drops/flowdrops) 10/0/0/0
      (pkts output/bytes output) 11/660
      Fair-queue: per-flow queue limit 16
        Exp-weight-constant: 9 (1/512)
        Mean queue depth: 0 packets
        class     Transmitted       Random drop      Tail/Flow drop Minimum Maximum Mark
                  pkts/bytes    pkts/bytes       pkts/bytes    thresh thresh prob
        0              11/660             0/0              0/0                 20            40 1/10
        1               0/0               0/0              0/0                 22            40 1/10
        2               0/0               0/0              0/0                 24            40 1/10
        3               0/0               0/0              0/0                 26            40 1/10
        4               0/0               0/0              0/0                 28            40 1/10
        5               0/0               0/0              0/0                 30            40 1/10
        6               0/0               0/0              0/0                 32            40 1/10
        7               0/0               0/0              0/0                 34            40 1/10
BUT! Until service-policy is on interface works nothing.
sh int bvi1
BVI1 is up, line protocol is up
Hardware is BVI, address is 0025.454a.940d (bia 0024.c495.6780)
Description: *** WAN BVI ***
Internet address is 10.96.0.57/24
MTU 1500 bytes, BW 256 Kbit/sec, DLY 5000 usec,
     reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
ARP type: ARPA, ARP Timeout 04:00:00
Last input never, output never, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 74
Queueing strategy: Class-based queueing
Output queue: 33/1000/0 (size/max total/drops)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
     0 packets input, 0 bytes, 0 no buffer
     Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
     114 packets output, 11034 bytes, 0 underruns
     0 output errors, 0 collisions, 0 interface resets
     0 unknown protocol drops
     0 output buffer failures, 0 output buffers swapped out
ping 10.96.0.1 source bvi1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.96.0.1, timeout is 2 seconds:
Packet sent with a source address of 10.96.0.57
Success rate is 0 percent (0/5)

3750X - Dropped multicat traffic flooding on all switchport vlan interfaces

Hello forum,
I have a problem on source multicast blocking. I have a switch with a vlan interface (Ex. vlan 20 )and on that vlan interface an extended ACL is present. That ACL block specific multicast groups. Furtehrmore I have many switchport access interfaces on vlan 20 with different sources connected.
If one source start streaming with multicast destination IP blocked by ACL, dropped traffic is flooaded on all switchports on source's vlan
IGMP snooping on this vlan is enabled but seems that dropped traffic stay on L2 vlan without it.
Device used: C3750X
IOS: 15.0(2)SE5
Thank you for help

Hi Michal,
thanks for your reply!
Yes, probably i've captured all lines of access-list... but I've to change my approach because my access-list is a extended "named" access-list and, on other post, I've read that "named" access-list cannot be debugged...
Now i've deleted all access-lists entries that refer to vlan2 and I've created new one "numerical":
#ip access-list extended 100
#10 ip permit 172.16.2.0 0.0.0.15 any log
In this mode the debug shows only access-list 100 traffic + bcast + mcast.
But, the strange thing is another one now...
I've bought a multifunction printer, that send scanned document to a email account, the printer haven't internal smtp, it makes a connection to hp servers that forward scans to real destination address...
I was curious to find out how this connection works because, my private/confidential documents are send on internet and, i would hope that hp use a secure connection from my printer to its server...
Well, if I add "log" switch command at the end of access-list, or I enable access-list debug, the printer stop to comunicate to hp services/server... if I turn off debug or rewrite access-list without "log" feature, incredibly the printer re-start to comunicate with hp...
Have you any idea that explain that? I'm going crazy...

Netflow on 6509 in Native Mode from Vlan Interface

I'm trying to get a 6509-E, running Cisco IOS Software, s72033_rp Software (s72033_rp-IPSERVICES_WAN-M), Version 12.
2(33)SXI9, RELEASE SOFTWARE (fc2), to send netflow traffic from a vlan interface to a Solarwinds server.
The server is not seeing all the vlan traffic, but does see all the traffic on the layer 2 ports (not netflow).
I've seen that a command, ip flow ingress layer2-switched vlan, needs to be enabled, but the OS I have does not support that command.
Or could it be that MLS is not configured except for a couple commands:
mls netflow interface
mls cef error action reset
netflow setup:
Flow export v5 is enabled for main cache
Export source and destination details :
VRF ID : Default
    Source(1)       10.31.101.1 (Vlan52)
    Destination(1) 10.30.2.196 (2055)
Version 5 flow records
14927339 flows exported in 615072 udp datagrams
0 flows failed due to lack of export packet
0 export packets were sent up to process level
0 export packets were dropped due to no fib
0 export packets were dropped due to adjacency issues
0 export packets were dropped due to fragmentation failures
0 export packets were dropped due to encapsulation fixup failures
0 export packets were dropped enqueuing for the RP
0 export packets were dropped due to IPC rate limiting
0 export packets were dropped due to Card not being able to export
interface:
interface Vlan52
description AN.VDI.stu
ip address 10.31.101.1 255.255.255.0
ip helper-address 10.31.149.200
no ip redirects
ip flow ingress
ip flow egress
ip pim neighbor-filter 98
ip pim sparse-dense-mode
ip cgmp

Enabling MLS was the fix.
mls netflow interface
mls flow ip interface-full
mls nde sender version 5
mls cef error action reset

Unknown protocol: classpath when SOA server parses WSDL of ADF Web Services

We used ADF 11.1.1.4 to create synchronous web services (via Application Module Service Interface). Everything worked fine, we were able to created SOA composites that references those ADF web services and deploy them to SOA server successfully.
However, since last weekend, all SOA composites that reference the ADF web services started to give the following exception when loaded during SOA server startup:
[2012-01-17T14:27:35.373-05:00] [soa_server1] [ERROR] [SOA-20003] [oracle.integration.platform] [tid: weblogic.work.j2ee.J2EEWorkManager$WorkWithListener@39ed0f9] [userId: <anonymous>] [ecid: 0000JJh8SfNFg4aPXMg8xb1F5Sgf000001,0] [APP: soa-infra] Unable to register service.[[
oracle.fabric.common.FabricException: javax.wsdl.WSDLException: WSDLException: faultCode=INVALID_WSDL: Error reading import of oramds:/deployed-composites/default/MainOrch100000000002001Composite_rev1.0/SOAAMServiceRef.wsdl: javax.wsdl.WSDLException: WSDLException: faultCode=INVALID_WSDL: Error reading import of oramds:/apps/epm/fcc/service/SOAAMService.wsdl: javax.wsdl.WSDLException: WSDLException: faultCode=INVALID_WSDL: Invalid URL or file: classpath:/META-INF/wsdl/ServiceException.wsdl: java.net.MalformedURLException: unknown protocol: classpath: WSDLException: faultCode=INVALID_WSDL: Error reading import of oramds:/deployed-composites/default/MainOrch100000000002001Composite_rev1.0/SOAAMServiceRef.wsdl: javax.wsdl.WSDLException: WSDLException: faultCode=INVALID_WSDL: Error reading import of oramds:/apps/epm/fcc/service/SOAAMService.wsdl: javax.wsdl.WSDLException: WSDLException: faultCode=INVALID_WSDL: Invalid URL or file: classpath:/META-INF/wsdl/ServiceException.wsdl: java.net.MalformedURLException: unknown protocol: classpath
at oracle.fabric.composite.model.CompositeModel.loadImports(CompositeModel.java:379)
at oracle.fabric.composite.model.CompositeModel.getWSDLManager(CompositeModel.java:198)
at oracle.integration.platform.blocks.soap.WebServiceEntryBindingComponent.getDefinition(WebServiceEntryBindingComponent.java:240)
at oracle.integration.platform.blocks.soap.WebServiceEntryBindingComponent.load(WebServiceEntryBindingComponent.java:147)
at oracle.integration.platform.blocks.soap.WebServiceEntryBindingComponent.load(WebServiceEntryBindingComponent.java:98)
at oracle.integration.platform.blocks.deploy.CompositeDeploymentConnection.deployServices(CompositeDeploymentConnection.java:161)
at oracle.integration.platform.blocks.deploy.CompositeDeploymentConnection.deploy(CompositeDeploymentConnection.java:92)
at oracle.integration.platform.blocks.deploy.CompositeDeployerImpl.deploy(CompositeDeployerImpl.java:149)
Caused by: javax.wsdl.WSDLException: WSDLException: faultCode=INVALID_WSDL: Error reading import of oramds:/apps/epm/fcc/service/SOAAMService.wsdl: javax.wsdl.WSDLException: WSDLException: faultCode=INVALID_WSDL: Invalid URL or file: classpath:/META-INF/wsdl/ServiceException.wsdl: java.net.MalformedURLException: unknown protocol: classpath
at oracle.j2ee.ws.wsdl.xml.WSDLReaderImpl.parseImport(WSDLReaderImpl.java:932)
at oracle.j2ee.ws.wsdl.xml.WSDLReaderImpl.parseDefinition(WSDLReaderImpl.java:808)
at oracle.j2ee.ws.wsdl.xml.WSDLReaderImpl.readWSDL(WSDLReaderImpl.java:708)
at oracle.j2ee.ws.wsdl.xml.WSDLReaderImpl.readWSDL(WSDLReaderImpl.java:656)
at oracle.j2ee.ws.wsdl.xml.WSDLReaderImpl.readWSDL(WSDLReaderImpl.java:368)
at oracle.j2ee.ws.wsdl.xml.WSDLReaderImpl.parseImport(WSDLReaderImpl.java:911)
... 32 more
Caused by: javax.wsdl.WSDLException: WSDLException: faultCode=INVALID_WSDL: Invalid URL or file: classpath:/META-INF/wsdl/ServiceException.wsdl: java.net.MalformedURLException: unknown protocol: classpath
at oracle.j2ee.ws.wsdl.xml.WSDLReaderImpl.parseImport(WSDLReaderImpl.java:929)
... 37 more
Caused by: java.net.MalformedURLException: unknown protocol: classpath
at java.net.URL.<init>(URL.java:574)
at java.net.URL.<init>(URL.java:465)
at oracle.j2ee.ws.wsdl.xml.WSDLReaderImpl.parseImport(WSDLReaderImpl.java:901)
... 37 more
Any suggestion about what might be causing this issue?
Thanks,
Fang

Just thought to put the solution here, in case anyone else that uses SOA encounter the same issue.
It turns out the setDomainEnv.cmd file for SOA server was corrupted, so that the list of PROTOCOL_HANDLERS are bad. It should have
set PROTOCOL_HANDLERS=%PROTOCOL_HANDLERS%;oracle.fabric.common.classloaderurl.handler;oracle.fabric.common.uddiurl.handler;oracle.bpm.io.fs.protocol
But something changed it to be only have oracle.mds.net.protocol, Therefore the classpath protocol could not be recognized by SOA server. Once we corrected the PROTOCOL_HANDLERS, this issue is gone.

PING TO ACE VLAN INTERFACES

Hi,
I am not able to ping the VLAN interfaces defined on the ACE devices unless directly connected to the subnet.
I tried options - defining Access-list,service-policy.I can ping the servers behind the ACE but i cannt ping the ACE vlan interface.
I captured the traffic on the ACE.I cannt see any traffic on the interfaces if i ping the VLAN ip address.I can see the traffic if i am pinging the host behind the ACE.
Is there any option available to enable icmp on the interfaces.

In order to ping the Vlan Interface you just need management policy applied to the vlan interface.
Class-maps used in the management-policy
defines the source addresses from where these management accesses are allowed.
If you can ping the interfaces from locally connected subnets but not from the remote subnets then there could be 2 reasons.
1. Some routing issues
2. Source IPs in Management class maps are not defined.
Following is an example of typical management policy
#Allow telnet & SSH from these ip addresses
#Allow ICMP from any source
class-map type management match-any MGMT-CLASS
10 match protocol telnet
20 match protocol ssh
30 match protocol icmp any
policy-map type management first-match MGMT-POLICY
class MGMT-CLASS
permit
interface vlan 10
ip address x.x.x.x 255.255.255.0
service-policy input MGMT-POLICY
no shutdown
interface vlan 20
ip address y.y.y.y 255.255.255.0
service-policy input MGMT-POLICY
no shutdown
Syed Iftekhar Ahmed

Unknown protocol: https

Hello
I have just coded a program which calls upon Web servcies, I have declared on my classpath the libraries: jcert.jar, jnet.jar, jsse.jar. :
but when I compile I have the following error :
java.net.MalformedURLException: unknown protocol: https
     at java.net.URL.<init>(URL.java:586)
     at java.net.URL.<init>(URL.java:476)
     at java.net.URL.<init>(URL.java:425)
     at DynamicInvoke.findImplURI(DynamicInvoke.java:77)
     at DynamicInvoke.run(DynamicInvoke.java:62)
     at DynamicInvoke.main(DynamicInvoke.java:57)
thanks in advance
My code is as follows :
import java.net.*;
import java.util.*;
import java.lang.reflect.*;
import org.uddi4j.client.*;
import org.uddi4j.request.*;
import org.uddi4j.response.*;
import org.uddi4j.datatype.*;
import org.uddi4j.datatype.service.*;
import org.uddi4j.datatype.binding.*;
import org.uddi4j.datatype.tmodel.*;
import com.ibm.wsdl.factory.*;
import com.ibm.wsdl.*;
import javax.wsdl.*;
import javax.wsdl.factory.*;
import javax.wsdl.xml.*;
import org.apache.axis.wsdl.toJava.*;
import org.apache.axis.encoding.*;
import org.apache.axis.client.Call;
import com.sun.net.ssl.*;//
import sun.net.www.protocol.http.HttpURLConnection;//
public class DynamicInvoke {
private String uddiInquiryURL = "http://uddi.ibm.com/ubr/inquiryapi";
private String uddiPublishURL = "https://uddi.ibm.com/ubr/publishapi";
private String businessName = "Yap Tat Kwong";
private String serviceName = "Nanyang Polytechnic";
public static void main(String[] args) {
     DynamicInvoke di = new DynamicInvoke();
     di.run();
public void run() {
     String implURI = findImplURI();
     if(implURI == null) return;
     try {
     parseWSDL(implURI);
     } catch(WSDLException wsdle) {
     wsdle.printStackTrace();
public String findImplURI() {
     try {
     // create a proxy to the UDDI
     UDDIProxy proxy = new UDDIProxy(new URL(uddiInquiryURL), new URL(uddiPublishURL));
     // we need to find the business in the UDDI
     // we must first create the Vector of business name
     Vector names = new Vector();
     names.add(new Name(businessName));
     // now get a list of all business matching our search criteria
     BusinessList businessList = proxy.find_business(names, null, null, null, null, null,10);
     // now we need to find the BusinessInfo object for our business
     Vector businessInfoVector = businessList.getBusinessInfos().getBusinessInfoVector();
     BusinessInfo businessInfo = null;
     for (int i = 0; i < businessInfoVector.size(); i++) {
          businessInfo = (BusinessInfo)businessInfoVector.elementAt(i);
          // make sure we have the right one
          if(businessName.equals(businessInfo.getNameString())) {
          break;
     // now find the service info
     Vector serviceInfoVector = businessInfo.getServiceInfos().getServiceInfoVector();
     ServiceInfo serviceInfo = null;
     for (int i = 0; i < serviceInfoVector.size(); i++) {
          serviceInfo = (ServiceInfo)serviceInfoVector.elementAt(i);
          // make sure we have the right one
     if(serviceName.equals(serviceInfo.getNameString())) {
          break;
     // we now need to get the business service object for our service
     // we do this by getting the ServiceDetail object first, and
     // getting the BusinessService objects through it
     ServiceDetail serviceDetail = proxy.get_serviceDetail(serviceInfo.getServiceKey());
     Vector businessServices = serviceDetail.getBusinessServiceVector();
     BusinessService businessService = null;
     for (int i = 0; i < businessServices.size(); i++) {
          businessService = (BusinessService)businessServices.elementAt(i);
          // make sure we have the right one
     if(serviceName.equals(businessService.getDefaultNameString())) {
          break;
     // ok, now we have the business service so we can get the binding template
     Vector bindingTemplateVector = businessService.getBindingTemplates().getBindingTemplateVector();
     AccessPoint accessPoint = null;
     BindingTemplate bindingTemplate = null;
     for(int i=0; i<bindingTemplateVector.size(); i++) {
          // find the binding template with an http access point
          bindingTemplate = (BindingTemplate)bindingTemplateVector.elementAt(i);
          accessPoint = bindingTemplate.getAccessPoint();
          if(accessPoint.getURLType().equals("http")) {
          break;
     // ok now we know which binding template we're dealing with
     // we can now find out the overview URL
     Vector tmodelInstanceInfoVector = bindingTemplate.getTModelInstanceDetails().getTModelInstanceInfoVector();
     String wsdlImplURI = null;
     for(int i=0; i<tmodelInstanceInfoVector.size(); i++) {
          TModelInstanceInfo instanceInfo = (TModelInstanceInfo)tmodelInstanceInfoVector.elementAt(i);
          InstanceDetails details = instanceInfo.getInstanceDetails();
          OverviewDoc wsdlImpl = details.getOverviewDoc();
          wsdlImplURI = wsdlImpl.getOverviewURLString();
          if(wsdlImplURI != null) break;
     return wsdlImplURI;
     } catch(Exception e) {
     e.printStackTrace();
     return null;
public void parseWSDL(String implURI) throws WSDLException {
     Definition implDef = null;
     Definition interfaceDef = null;
     String targetNamespace = null;
     String serviceName = null;
     String portName = null;
     String operationName = null;
     Object[] inputParams = null;
     // first get the definition object got the WSDL impl
     try {
     WSDLFactory factory = new WSDLFactoryImpl();
     WSDLReader reader = factory.newWSDLReader();
     implDef = reader.readWSDL(implURI);
     } catch(WSDLException e) {
     e.printStackTrace();
     if(implDef==null) {
     throw new WSDLException(WSDLException.OTHER_ERROR,"No WSDL impl definition found.");
     // now get the Definition object for the interface WSDL
     Map imports = implDef.getImports();
     Set s = imports.keySet();
     Iterator it = s.iterator();
     while(it.hasNext()) {
     Object o = it.next();
     Vector intDoc = (Vector)imports.get(o);
     // we want to get the ImportImpl object of it exists
     for(int i=0; i<intDoc.size(); i++) {
          Object obj = intDoc.elementAt(i);
          if(obj instanceof ImportImpl) {
          interfaceDef = ((ImportImpl)obj).getDefinition();
     if(interfaceDef == null) {
     throw new WSDLException(WSDLException.OTHER_ERROR,"No WSDL interface definition found.");
     // let's get the target namespace Axis will need from the WSDL impl
     targetNamespace = implDef.getTargetNamespace();
     // great we've got the WSDL definitions now we need to find the PortType so
     // we can find the methods we can invoke
     Vector allPorts = new Vector();
Map ports = interfaceDef.getPortTypes();
     s = ports.keySet();
     it = s.iterator();
     while(it.hasNext()) {
     Object o = it.next();
     Object obj = ports.get(o);
     if(obj instanceof PortType) {
          allPorts.add((PortType)obj);
     // now we've got a vector of all the port types - normally some logic would
     // go here to choose which port type we want to use but we'll just choose
     // the first one
     PortType port = (PortType)allPorts.elementAt(0);
     List operations = port.getOperations();
     // let's get the service in the WSDL impl which contains this port
     // to do this we must first find the QName of the binding with the port type
     // that corresponds to the port type of our chosen part
     QName bindingQName = null;
     Map bindings = interfaceDef.getBindings();
     s = bindings.keySet();
     it = s.iterator();
     while(it.hasNext()) {
     Binding binding = (Binding)bindings.get(it.next());
     if(binding.getPortType()==port) {
          // we've got our binding
          bindingQName = binding.getQName();
     if(bindingQName==null) {
     throw new WSDLException(WSDLException.OTHER_ERROR,"No binding found for chosen port type.");
     // now we can find the service in the WSDL impl which provides an endpoint
     // for the service we just found above
     Map implServices = implDef.getServices();
     s = implServices.keySet();
     it = s.iterator();
     while(it.hasNext()) {
     Service serv = (Service)implServices.get(it.next());
     Map m = serv.getPorts();
     Set set = m.keySet();
     Iterator iter = set.iterator();
     while(iter.hasNext()) {
          Port p = (Port)m.get(iter.next());
          if(p.getBinding().getQName().toString().equals(bindingQName.toString())) {
          // we've got our service store the port name and service name
          portName = serv.getQName().toString();
          serviceName = p.getName();
          break;
     if(portName != null) break;
     // ok now we got all the operations previously - normally we would have some logic here to
     // choose which operation, however, for the sake of simplicity we'll just
     // choose the first one
     Operation op = (Operation)operations.get(0);
     operationName = op.getName();
     // now let's get the Message object describing the XML for the input and output
     // we don't care about the specific type of the output as we'll just cast it to an Object
     Message inputs = op.getInput().getMessage();
     // let's find the input params
     Map inputParts = inputs.getParts();
     // create the object array which Axis will use to pass in the parameters
     inputParams = new Object[inputParts.size()];
     s = inputParts.keySet();
     it = s.iterator();
     int i=0;
     while(it.hasNext()) {
     Part part = (Part)inputParts.get(it.next());
     QName qname = part.getTypeName();
     // if it's not in the http://www.w3.org/2001/XMLSchema namespace then
     // we don't know about it - throw an exception
     String namespace = qname.getNamespaceURI();
     if(!namespace.equals("http://www.w3.org/2001/XMLSchema")) {
          throw new WSDLException(WSDLException.OTHER_ERROR,"Namespace unrecognized");
     // now we can get the Java type which the the QName maps to - we do this
     // by using the Axis tools which map WSDL types to Java types in the wsdl2java tool
     String localPart = qname.getLocalPart();
     javax.xml.rpc.namespace.QName wsdlQName = new javax.xml.rpc.namespace.QName(namespace,localPart);
     TypeMapping tm = DefaultTypeMappingImpl.create();
     Class cl = tm.getClassForQName(wsdlQName);
     // if the Java type is a primitive, we need to wrap it in an object
     if(cl.isPrimitive()) {
          cl = wrapPrimitive(cl);
     // we could prompt the user to input the param here but we'll just
     // assume a random number between 1 and 10
     // first we need to find the constructor which takes a string representation of a number
     // if a complex type was required we would use reflection to break it down
     // and prompt the user to input values for each member variable in Object representing
     // the complex type
     try {
          Constructor cstr = cl.getConstructor(new Class[] { Class.forName("java.lang.String") });
          inputParams[i] = cstr.newInstance(new Object [] { ""+new Random().nextInt(10) });
     } catch(Exception e) {
          // shoudn't happen
          e.printStackTrace();
     i++;
     // great now we've built up all the paramters we need to invoke the Web service with Axis
     // now all we need to do is actually invoke it
     System.out.print("\nAxis parameters gathered:\nTargetNamespace = "+targetNamespace +"\n"+
     "Service Name = "+serviceName +"\n"+
     "Port Name = "+portName +"\n"+
     "Operation Name = "+operationName+"\n"+
     "Input Parameters = ");
     for(i=0; i<inputParams.length; i++) {
     System.out.print(inputParams);
     if(inputParams.length != 0 && inputParams.length-1 > i) {
          System.out.print(", ");
     System.out.println("\n");
     axisInvoke(targetNamespace, serviceName, portName, operationName, inputParams, implURI);
public Class wrapPrimitive(Class cl) throws WSDLException {
     String type = cl.getName();
     try {
     if(type.equals("byte")) {
          return Class.forName("java.lang.Byte");
     } else if(type.equals("char")) {
          return Class.forName("java.lang.Character");
     } else if(type.equals("short")) {
          return Class.forName("java.lang.Short");
     } else if(type.equals("int")) {
          return Class.forName("java.lang.Integer");
     } else if(type.equals("double")) {
          return Class.forName("java.lang.Double");
     } else if(type.equals("float")) {
          return Class.forName("java.lang.Float");
     } else if(type.equals("long")) {
          return Class.forName("java.lang.Long");
     } else {
          throw new WSDLException(WSDLException.OTHER_ERROR,"Unrecognized primitive type");
     } catch(ClassNotFoundException e) {
     // this should never happen
     e.printStackTrace();
     return null;
public void axisInvoke(String targetNamespace, String serviceName, String portName,
               String operationName, Object[] inputParams, String implURI) {
     try {
     // first, due to a funny Axis idiosyncracy we must strip portName of
     // it's target namespace so we can pass it in as targetNamespace, localPart
     int index = portName.indexOf(":",portName.indexOf("http://")+new String("http://").length());
     String portNamespace = portName.substring(0,index);
     portName = portName.substring(index==0?index:index+1); // to strip the :
     javax.xml.rpc.namespace.QName serviceQN =
          new javax.xml.rpc.namespace.QName( portNamespace, portName );
     org.apache.axis.client.Service service =
          new org.apache.axis.client.Service(new URL(implURI), serviceQN);
     javax.xml.rpc.namespace.QName portQN =
          new javax.xml.rpc.namespace.QName( targetNamespace, serviceName );
     // This Call object will be used the invocation
     Call call = (Call) service.createCall();
     // Now make the call...
     System.out.println("Invoking service >> " + serviceName + " <<...");
     call.setOperation( portQN, operationName );
     Object ret = (Integer) call.invoke( inputParams );
     System.out.println("Result returned from call to "+serviceName+" -- "+ret);
     } catch(java.net.MalformedURLException e) {
     System.out.println("Error invoking service : "+e);
     } catch(javax.xml.rpc.ServiceException e2) {
     System.out.println("Error invoking service : "+e2);
     } catch(java.rmi.RemoteException e3) {
     System.out.println("Error invoking service : "+e3);

Try adding the following line to the java command,
-Djava.protocol.handler.pkgs=com.sun.net.ssl.internal.www.protocol

Broadcast/multicast counters does not increase on vlan interface

Hi,
on a Cat6500 we try to monitor interface packet statistics via snmp, in detail we want to get information about the relation between unicast, multicast and broadcast packet counter.
What we found out is that while on physical l2 interfaces all counters (ifHCInUcastPkts, ifHCInMulticastPkts, fHCInBroadcastPkts, ifHCOutUcastPkts, ifHCOutMulticastPkts, ifHCOutBroadcastPkts) are filled, on vlan interfaces multicast in/out and broadcast out packets stay zero whole the time. We use arp, hsrp, ospf and other well know broadcast and multicast based protocols.
Does anybody know why this counters do not increase?
Attached you find an excel sheet which shows an example of interface counter vs. vlan counter.
many thanks in advance,
Thorsten Steffen

Hi jon,
belown the result of sh sdm prefer,so need i a licence ip service to apply the route-maap on the interface vlan,or just entrer the config"sdm prefer routing" and reboot the switch?
SWBB0#sh sdm prefer
The current template is "desktop default" template.
The selected template optimizes the resources in
the switch to support this level of features for
8 routed interfaces and 1024 VLANs.
number of unicast mac addresses:                  6K
number of IPv4 IGMP groups + multicast routes:    1K
number of IPv4 unicast routes:                    8K
    number of directly-connected IPv4 hosts:        6K
    number of indirect IPv4 routes:                 2K
number of IPv6 multicast groups:                  64
number of directly-connected IPv6 addresses:      74
number of indirect IPv6 unicast routes:           32
number of IPv4 policy based routing aces:         0
number of IPv4/MAC qos aces:                      0.5K
number of IPv4/MAC security aces:                 0.875k
number of IPv6 policy based routing aces:         0
number of IPv6 qos aces:                          0
number of IPv6 security aces:                     60

MSFC - cannot ping vlan interface

Hi,
We have several vlans defined on the mfsc. On the msfc we could ping all the vlans interface except 1 vlan. The interface is up and just recently we weren't able to ping it. Any help is much appreciated.
TIA.
PF

Hi PF,
AFAIK, When you are pinging a particular interface stting on the MSFC the source IP would be of any other available interfaces. If you are pinging vlan 110 it will take source ip of any other available vlan interface and the destination is Vlan 110, but ACL defined on the interface doesnot have any ACE for the same so that packets will be dropped.
Removing the ACL worked as explained above.
regards,
-amit singh

Virtual Mail Setup - imapd-ssl error unknown protocol

Hi,
I have been relentlessly trying to setup my first email server and I think that I am almost there. I have been following the guide at:
https://wiki.archlinux.org/index.php/Simple_Virtual_User_Mail_System
I have followed it step by step and I'm 99% sure that I didn't miss a thing when setting it up.
However, I cannot login to my roundcube mail. It just times out.
This is the error that pops up in /var/log/mail.log:
mail imapd-ssl: couriertls: accept: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol
this is the contents of /etc/authlib/authmysqlrc:
##VERSION: $Id: authmysqlrc,v 1.20 2007/10/07 02:50:45 mrsam Exp $
# Copyright 2000-2007 Double Precision, Inc. See COPYING for
# distribution information.
# Do not alter lines that begin with ##, they are used when upgrading
# this configuration.
# authmysqlrc created from authmysqlrc.dist by sysconftool
# DO NOT INSTALL THIS FILE with world read permissions. This file
# might contain the MySQL admin password!
# Each line in this file must follow the following format:
# field[spaces|tabs]value
# That is, the name of the field, followed by spaces or tabs, followed by
# field value. Trailing spaces are prohibited.
##NAME: LOCATION:0
# The server name, userid, and password used to log in.
MYSQL_SERVER localhost
MYSQL_USERNAME postfix_user
MYSQL_PASSWORD *******MY PASSWORD*******
##NAME: SSLINFO:0
# The SSL information.
# To use SSL-encrypted connections, define the following variables (available
# in MySQL 4.0, or higher):
# MYSQL_SSL_KEY /path/to/file
# MYSQL_SSL_CERT /path/to/file
# MYSQL_SSL_CACERT /path/to/file
# MYSQL_SSL_CAPATH /path/to/file
# MYSQL_SSL_CIPHERS ALL:!DES
##NAME: MYSQL_SOCKET:0
# MYSQL_SOCKET can be used with MySQL version 3.22 or later, it specifies the
# filesystem pipe used for the connection
# MYSQL_SOCKET /var/mysql/mysql.sock
##NAME: MYSQL_PORT:0
# MYSQL_PORT can be used with MySQL version 3.22 or later to specify a port to
# connect to.
MYSQL_PORT 3306
##NAME: MYSQL_OPT:0
# Leave MYSQL_OPT as 0, unless you know what you're doing.
MYSQL_OPT 0
##NAME: MYSQL_DATABASE:0
# The name of the MySQL database we will open:
MYSQL_DATABASE postfix_db
#NAME: MYSQL_CHARACTER_SET:0
# This is optional. MYSQL_CHARACTER_SET installs a character set. This option
# can be used with MySQL version 4.1 or later. MySQL supports 70+ collations
# for 30+ character sets. See MySQL documentations for more detalis.
# MYSQL_CHARACTER_SET latin1
##NAME: MYSQL_USER_TABLE:0
# The name of the table containing your user data. See README.authmysqlrc
# for the required fields in this table.
MYSQL_USER_TABLE mailbox
##NAME: MYSQL_CRYPT_PWFIELD:0
# Either MYSQL_CRYPT_PWFIELD or MYSQL_CLEAR_PWFIELD must be defined. Both
# are OK too. crypted passwords go into MYSQL_CRYPT_PWFIELD, cleartext
# passwords go into MYSQL_CLEAR_PWFIELD. Cleartext passwords allow
# CRAM-MD5 authentication to be implemented.
MYSQL_CRYPT_PWFIELD password
##NAME: MYSQL_CLEAR_PWFIELD:0
# MYSQL_CLEAR_PWFIELD clear
##NAME: MYSQL_DEFAULT_DOMAIN:0
# If DEFAULT_DOMAIN is defined, and someone tries to log in as 'user',
# we will look up 'user@DEFAULT_DOMAIN' instead.
# DEFAULT_DOMAIN example.com
##NAME: MYSQL_UID_FIELD:0
# Other fields in the mysql table:
# MYSQL_UID_FIELD - contains the numerical userid of the account
MYSQL_UID_FIELD 5000
##NAME: MYSQL_GID_FIELD:0
# Numerical groupid of the account
MYSQL_GID_FIELD 5000
##NAME: MYSQL_LOGIN_FIELD:0
# The login id, default is id. Basically the query is:
# SELECT MYSQL_UID_FIELD, MYSQL_GID_FIELD, ... WHERE id='loginid'
MYSQL_LOGIN_FIELD username
##NAME: MYSQL_HOME_FIELD:0
MYSQL_HOME_FIELD "/home/vmail"
##NAME: MYSQL_NAME_FIELD:0
# The user's name (optional)
MYSQL_NAME_FIELD name
##NAME: MYSQL_MAILDIR_FIELD:0
# This is an optional field, and can be used to specify an arbitrary
# location of the maildir for the account, which normally defaults to
# $HOME/Maildir (where $HOME is read from MYSQL_HOME_FIELD).
# You still need to provide a MYSQL_HOME_FIELD, even if you uncomment this
# out.
MYSQL_MAILDIR_FIELD maildir
##NAME: MYSQL_DEFAULTDELIVERY:0
# Courier mail server only: optional field specifies custom mail delivery
# instructions for this account (if defined) -- essentially overrides
# DEFAULTDELIVERY from ${sysconfdir}/courierd
# MYSQL_DEFAULTDELIVERY defaultdelivery
##NAME: MYSQL_QUOTA_FIELD:0
# Define MYSQL_QUOTA_FIELD to be the name of the field that can optionally
# specify a maildir quota. See README.maildirquota for more information
MYSQL_QUOTA_FIELD quota
##NAME: MYSQL_AUXOPTIONS:0
# Auxiliary options. The MYSQL_AUXOPTIONS field should be a char field that
# contains a single string consisting of comma-separated "ATTRIBUTE=NAME"
# pairs. These names are additional attributes that define various per-account
# "options", as given in INSTALL's description of the "Account OPTIONS"
# setting.
# MYSQL_AUXOPTIONS_FIELD auxoptions
# You might want to try something like this, if you'd like to use a bunch
# of individual fields, instead of a single text blob:
# MYSQL_AUXOPTIONS_FIELD CONCAT("disableimap=",disableimap,",disablepop3=",disablepop3,",disablewebmail=",disablewebmail,",sharedgroup=",sharedgroup)
# This will let you define fields called "disableimap", etc, with the end result
# being something that the OPTIONS parser understands.
##NAME: MYSQL_WHERE_CLAUSE:0
# This is optional, MYSQL_WHERE_CLAUSE can be basically set to an arbitrary
# fixed string that is appended to the WHERE clause of our query
# MYSQL_WHERE_CLAUSE server='mailhost.example.com'
##NAME: MYSQL_SELECT_CLAUSE:0
# (EXPERIMENTAL)
# This is optional, MYSQL_SELECT_CLAUSE can be set when you have a database,
# which is structuraly different from proposed. The fixed string will
# be used to do a SELECT operation on database, which should return fields
# in order specified bellow:
# username, cryptpw, clearpw, uid, gid, home, maildir, quota, fullname, options
# The username field should include the domain (see example below).
# Enabling this option causes ignorance of any other field-related
# options, excluding default domain.
# There are two variables, which you can use. Substitution will be made
# for them, so you can put entered username (local part) and domain name
# in the right place of your query. These variables are:
# $(local_part), $(domain), $(service)
# If a $(domain) is empty (not given by the remote user) the default domain
# name is used in its place.
# $(service) will expand out to the service being authenticated: imap, imaps,
# pop3 or pop3s. Courier mail server only: service will also expand out to
# "courier", when searching for local mail account's location. In this case,
# if the "maildir" field is not empty it will be used in place of
# DEFAULTDELIVERY. Courier mail server will also use esmtp when doing
# authenticated ESMTP.
# This example is a little bit modified adaptation of vmail-sql
# database scheme:
# MYSQL_SELECT_CLAUSE SELECT CONCAT(popbox.local_part, '@', popbox.domain_name), \
# CONCAT('{MD5}', popbox.password_hash), \
# popbox.clearpw, \
# domain.uid, \
# domain.gid, \
# CONCAT(domain.path, '/', popbox.mbox_name), \
# domain.quota, \
# CONCAT("disableimap=",disableimap,",disablepop3=", \
# disablepop3,",disablewebmail=",disablewebmail, \
# ",sharedgroup=",sharedgroup) \
# FROM popbox, domain \
# WHERE popbox.local_part = '$(local_part)' \
# AND popbox.domain_name = '$(domain)' \
# AND popbox.domain_name = domain.domain_name
##NAME: MYSQL_ENUMERATE_CLAUSE:1
# {EXPERIMENTAL}
# Optional custom SQL query used to enumerate accounts for authenumerate,
# in order to compile a list of accounts for shared folders. The query
# should return the following fields: name, uid, gid, homedir, maildir, options
# Example:
# MYSQL_ENUMERATE_CLAUSE SELECT CONCAT(popbox.local_part, '@', popbox.domain_name), \
# domain.uid, \
# domain.gid, \
# CONCAT(domain.path, '/', popbox.mbox_name), \
# CONCAT('sharedgroup=', sharedgroup) \
# FROM popbox, domain \
# WHERE popbox.local_part = '$(local_part)' \
# AND popbox.domain_name = '$(domain)' \
# AND popbox.domain_name = domain.domain_name
##NAME: MYSQL_CHPASS_CLAUSE:0
# (EXPERIMENTAL)
# This is optional, MYSQL_CHPASS_CLAUSE can be set when you have a database,
# which is structuraly different from proposed. The fixed string will
# be used to do an UPDATE operation on database. In other words, it is
# used, when changing password.
# There are four variables, which you can use. Substitution will be made
# for them, so you can put entered username (local part) and domain name
# in the right place of your query. There variables are:
# $(local_part) , $(domain) , $(newpass) , $(newpass_crypt)
# If a $(domain) is empty (not given by the remote user) the default domain
# name is used in its place.
# $(newpass) contains plain password
# $(newpass_crypt) contains its crypted form
# MYSQL_CHPASS_CLAUSE UPDATE popbox \
# SET clearpw='$(newpass)', \
# password_hash='$(newpass_crypt)' \
# WHERE local_part='$(local_part)' \
# AND domain_name='$(domain)'
I have been reading around about that error to no avail.
i have extension=openssl.so uncommented in /etc/php/php.ini and round cube says my openssl is fine.
Any help would be much appreciated!
kush
Last edited by kush (2012-01-05 16:49:18)

Hey Kush I am having the same issue, did you ever get it working???

Vlan interface "unknown protocol drops"

Similar Messages

Maybe you are looking for