[openstack-dev] [barbican] Utilizing the KMIP plugin

Farr, Kaitlin M. Kaitlin.Farr at jhuapl.edu
Mon Apr 6 14:44:23 UTC 2015

Hi Chris,

I would be happy to help you with the trouble you've encountered using the
KMIP plugin. From what you've described, it sounds like you have everything
set up correctly. If you've specified kmip_plugin under
enabled_secret_store_plugins, then the reason it would give you
SecretStorePluginsNotConfigured is if it had encountered an error in the
KMIPSecretStore __init__ method. Just to be sure, the permissions of the file
that you specified under the "keyfile" config option are 400, correct? Are
there any other error messages earlier in the logs?

Feel free to pass along your barbican-api.conf (changing any proprietary
information, of course) if you'd like another set of eyes to look at it.


Kaitlin Farr
Software Engineer


Message: 39
Date: Fri, 3 Apr 2015 15:03:10 -0500
From: Christopher N Solis <cnsolis at us.ibm.com>
To: openstack-dev at lists.openstack.org
Subject: [openstack-dev] [barbican] Utilizing the KMIP plugin
        <OFC57FFB97.98250FC0-ON87257E1C.006E0D6A-86257E1C.006E2BEC at us.ibm.com>
Content-Type: text/plain; charset="us-ascii"

I am having some trouble with the kmip_plugin and would like some help.

When I make a call to barbican to store a secret it returns the following

2015-04-03 12:33:17,279 - barbican.api.controllers - ERROR - Secret
creation failure seen - please contact site administrator.
Traceback (most recent call last):
  File "/home/swift/barbican/barbican/api/controllers/__init__.py", line
98, in handler
    return fn(inst, *args, **kwargs)
  File "/home/swift/barbican/barbican/api/controllers/__init__.py", line
84, in enforcer
    return fn(inst, *args, **kwargs)
  File "/home/swift/barbican/barbican/api/controllers/__init__.py", line
140, in content_types_enforcer
    return fn(inst, *args, **kwargs)
  File "/home/swift/barbican/barbican/api/controllers/secrets.py", line
294, in on_post
  File "/home/swift/barbican/barbican/plugin/resources.py", line 101, in
    key_spec=key_spec, plugin_name=plugin_name)
  File "/home/swift/barbican/barbican/plugin/interface/secret_store.py",
line 477, in _check_plugins_configured
    raise SecretStorePluginsNotConfigured()
SecretStorePluginsNotConfigured: No secret store plugins have been

In the barbican-api.conf file I have set enabled_secretstore_plugins to
I have also updated the kmip_plugin part of the file to point to the host
and port where my kmip Key Manager is running
with all the required credentials and ssl certs.
I also made sure the ssl requirements are set to permissions 400.

Is there something I am missing that is causing this problem?

Thank You!!

- Christopher Solis


Software Developer - Cloud Infrastructure Services Security

   Phone: 1-512-286-6458 | Mobile:                                IBM
   E-mail: cnsolis at us.ibm.com                         11501 Burnet Rd
                                                Austin, TX 78758-3400
                                                        United States

More information about the OpenStack-dev mailing list