<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 255); font-size: 14px; font-family: Calibri, sans-serif;">
<div>Hello Christopher,</div>
<div><br>
</div>
<div>It does seem that configs are being read for another location. Try to remove that copy in you home directory (so just keep the /etc location). If you see the same issue, try to rename your /etc/barbican/barbican-api.conf file to something else. Barbican
should crash, probably with a No SQL connection error.</div>
<div><br>
</div>
<div>Also, double check the ‘kmip_plugin’ setting in setup.cfg as per below, and try running ‘pip install -e .’ again in your virtual environment.</div>
<div><br>
</div>
<div>FWIW, this CR adds better logging of plugin errors once the loading problem you have is figured out: <a href="https://review.openstack.org/#/c/171868/">https://review.openstack.org/#/c/171868/</a></div>
<div><br>
</div>
<div>Thanks,</div>
<div>John</div>
<div><br>
</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>Christopher N Solis <<a href="mailto:cnsolis@us.ibm.com">cnsolis@us.ibm.com</a>><br>
<span style="font-weight:bold">Reply-To: </span>"OpenStack Development Mailing List (not for usage questions)" <<a href="mailto:openstack-dev@lists.openstack.org">openstack-dev@lists.openstack.org</a>><br>
<span style="font-weight:bold">Date: </span>Thursday, April 9, 2015 at 1:55 PM<br>
<span style="font-weight:bold">To: </span>"OpenStack Development Mailing List (not for usage questions)" <<a href="mailto:openstack-dev@lists.openstack.org">openstack-dev@lists.openstack.org</a>><br>
<span style="font-weight:bold">Subject: </span>Re: [openstack-dev] [barbican] Utilizing the KMIP plugin<br>
</div>
<div><br>
</div>
<div>
<div>
<p><font size="2" face="sans-serif">Hey John. </font><br>
<font size="2" face="sans-serif">Thanks for letting me know about the error. But I think my configuration is not seeing the kmip_plugin selection.</font><br>
<font size="2" face="sans-serif">In my barbican-api.conf file in /etc/barbican I have set enabled_secretstore_plugins = kmip_plugin</font><br>
<br>
<font size="2" face="sans-serif">However, I don't think it is creating a KMIPSecretStore instance.
</font><br>
<font size="2" face="sans-serif">I edited the code in kmip_secret_store.py and put a breakpoint at the very beginning of the init function.</font><br>
<font size="2" face="sans-serif">When I make a barbican request to put a secret in there, it did not stop at the breakpoint at all.
</font><br>
<font size="2" face="sans-serif">I put another breakpoint in the store_crypto.py file inside the init function for the StoreCryptoAdapterPlugin and I
</font><br>
<font size="2" face="sans-serif">was able to enter the code at that breakpoint. </font>
<br>
<br>
<font size="2" face="sans-serif">So even though in my barbican-api.conf file I specified kmip_plugin it seems to be using the store_crypto plugin instead.
</font><br>
<br>
<font size="2" face="sans-serif">Is there something that might cause this to happen?
</font><br>
<font size="2" face="sans-serif">I also want to note that my code has the most up to date pull from the community code.
</font><br>
<br>
<font size="2" face="sans-serif">Here's what my /etc/barbican/barbican-api.conf file has in it:
</font><br>
<br>
<font size="2" face="sans-serif"># ================= Secret Store Plugin ===================</font><br>
<font size="2" face="sans-serif">[secretstore]</font><br>
<font size="2" face="sans-serif">namespace = barbican.secretstore.plugin</font><br>
<font size="2" face="sans-serif">enabled_secretstore_plugins = kmip_plugin</font><br>
<font size="2" face="sans-serif">...</font><br>
<font size="2" face="sans-serif">...</font><br>
<font size="2" face="sans-serif">...</font><br>
<font size="2" face="sans-serif"># ================== KMIP plugin =====================</font><br>
<font size="2" face="sans-serif">[kmip_plugin]</font><br>
<font size="2" face="sans-serif">username = '******'</font><br>
<font size="2" face="sans-serif">password = '******'</font><br>
<font size="2" face="sans-serif">host = 10.0.2.15</font><br>
<font size="2" face="sans-serif">port = 5696</font><br>
<font size="2" face="sans-serif">keyfile = '/etc/barbican/rootCA.key'</font><br>
<font size="2" face="sans-serif">certfile = '/etc/barbican/rootCA.pem'</font><br>
<font size="2" face="sans-serif">ca_certs = '/etc/barbican/rootCA.pem'</font><br>
<br>
<br>
<font size="1" face="Arial">Regards, </font><br>
<font size="1" face="Arial">Christopher Solis</font><br>
<br>
<br>
<img width="16" height="16" src="cid:1__=08BBF4B1DFF6378C8f9e8a93df938@us.ibm.com" border="0" alt="Inactive hide details for John Wood ---04/08/2015 03:16:58 PM---Hello Christopher, My local configuration is indeed seeing the "><font size="2" color="#424282" face="sans-serif">John
Wood ---04/08/2015 03:16:58 PM---Hello Christopher, My local configuration is indeed seeing the kmip_plugin selection, but when steve</font><br>
<br>
<font size="1" color="#5F5F5F" face="sans-serif">From: </font><font size="1" face="sans-serif">John Wood <<a href="mailto:john.wood@RACKSPACE.COM">john.wood@RACKSPACE.COM</a>></font><br>
<font size="1" color="#5F5F5F" face="sans-serif">To: </font><font size="1" face="sans-serif">"OpenStack Development Mailing List (not for usage questions)" <<a href="mailto:openstack-dev@lists.openstack.org">openstack-dev@lists.openstack.org</a>></font><br>
<font size="1" color="#5F5F5F" face="sans-serif">Date: </font><font size="1" face="sans-serif">04/08/2015 03:16 PM</font><br>
<font size="1" color="#5F5F5F" face="sans-serif">Subject: </font><font size="1" face="sans-serif">Re: [openstack-dev] [barbican] Utilizing the KMIP plugin</font><br>
</p>
<hr width="100%" size="2" align="left" noshade="" style="color:#8091A5; ">
<br>
<br>
<br>
<font size="1" color="#0000FF" face="Calibri">Hello Christopher, </font><br>
<br>
<font size="1" color="#0000FF" face="Calibri">My local configuration is indeed seeing the kmip_plugin selection, but when stevedore tries to load the KMIP plugin it crashes because required files are missing in my local environment (see
</font><a href="https://github.com/openstack/barbican/blob/master/barbican/plugin/kmip_secret_store.py#L131" target="_blank"><font size="1" color="#1D40FF" face="Arial">https://github.com/openstack/barbican/blob/master/barbican/plugin/kmip_secret_store.py#L131</font></a><font size="1" color="#0000FF" face="Calibri">)
for example.</font><br>
<br>
<font size="1" color="#0000FF" face="Calibri">Stevedore logs the exception but then doesn’t load this module, so when Barbican asks for an available plugin it doesn’t see it and crashes as you see. So the root exception from stevedore isn’t showing up in my
logs for some reason, and probably not in yours as well. We’ll try to put up a CR to at least expose this exception in logs. In the mean time, make sure the KMIP values checked via that link above are configured on your machine.</font><br>
<br>
<font size="1" color="#0000FF" face="Calibri">Sorry for the inconvenience,</font><br>
<font size="1" color="#0000FF" face="Calibri">John</font><br>
<br>
<br>
<font size="2" face="Calibri"><b>From: </b></font><font size="2" face="Calibri">Christopher N Solis <</font><a href="mailto:cnsolis@us.ibm.com"><font size="2" color="#0000FF" face="Calibri"><u>cnsolis@us.ibm.com</u></font></a><font size="2" face="Calibri">></font><font size="2" face="Calibri"><b><br>
Reply-To: </b></font><font size="2" face="Calibri">"OpenStack Development Mailing List (not for usage questions)" <</font><a href="mailto:openstack-dev@lists.openstack.org"><font size="2" color="#0000FF" face="Calibri"><u>openstack-dev@lists.openstack.org</u></font></a><font size="2" face="Calibri">></font><font size="2" face="Calibri"><b><br>
Date: </b></font><font size="2" face="Calibri">Wednesday, April 8, 2015 at 11:27 AM</font><font size="2" face="Calibri"><b><br>
To: </b></font><font size="2" face="Calibri">"OpenStack Development Mailing List (not for usage questions)" <</font><a href="mailto:openstack-dev@lists.openstack.org"><font size="2" color="#0000FF" face="Calibri"><u>openstack-dev@lists.openstack.org</u></font></a><font size="2" face="Calibri">></font><font size="2" face="Calibri"><b><br>
Subject: </b></font><font size="2" face="Calibri">Re: [openstack-dev] [barbican] Utilizing the KMIP plugin</font><br>
<p><font size="2" color="#0000FF" face="sans-serif">Hey John. <br>
I do have the barbican-api.conf file located in the /etc/barbican folder. But that does not seem to be the one that barbican
<br>
reads from. It seems to be reading from the barbican-api.conf file locate in my home directory.
<br>
Either way, both have the exact same configurations. </font><font size="1" color="#0000FF" face="Calibri"><br>
</font><font size="2" color="#0000FF" face="sans-serif"><br>
I also checked the setup.cfg file and it does have the line for kmip_plugin . </font>
<font size="1" color="#0000FF" face="Calibri"><br>
</font><font size="1" color="#0000FF" face="Arial"><br>
Regards,</font><font size="1" color="#0000FF" face="Calibri"><br>
</font><font size="1" color="#0000FF" face="Arial"><br>
</font><font size="3" color="#0000FF" face="Arial"><b> CHRIS SOLIS</b></font><font size="1" color="#0000FF" face="Calibri"><br>
<br>
</font><img src="cid:1__=08BBF4B1DFF6378C8f9e8a93df938@us.ibm.com" width="16" height="16" alt="Inactive hide details for John Wood ---04/07/2015 10:39:18 AM---Hello Christopher, Just checking, but is that barbican-api.conf"><font size="2" color="#424282" face="sans-serif">John
Wood ---04/07/2015 10:39:18 AM---Hello Christopher, Just checking, but is that barbican-api.conf file located in your local system's</font><font size="1" color="#0000FF" face="Calibri"><br>
</font><font size="1" color="#5F5F5F" face="sans-serif"><br>
From: </font><font size="1" color="#0000FF" face="sans-serif">John Wood <</font><a href="mailto:john.wood@RACKSPACE.COM"><font size="1" color="#0000FF" face="sans-serif"><u>john.wood@RACKSPACE.COM</u></font></a><font size="1" color="#0000FF" face="sans-serif">></font><font size="1" color="#5F5F5F" face="sans-serif"><br>
To: </font><font size="1" color="#0000FF" face="sans-serif">"</font><a href="mailto:openstack-dev@lists.openstack.org"><font size="1" color="#0000FF" face="sans-serif"><u>openstack-dev@lists.openstack.org</u></font></a><font size="1" color="#0000FF" face="sans-serif">"
<</font><a href="mailto:openstack-dev@lists.openstack.org"><font size="1" color="#0000FF" face="sans-serif"><u>openstack-dev@lists.openstack.org</u></font></a><font size="1" color="#0000FF" face="sans-serif">></font><font size="1" color="#5F5F5F" face="sans-serif"><br>
Date: </font><font size="1" color="#0000FF" face="sans-serif">04/07/2015 10:39 AM</font><font size="1" color="#5F5F5F" face="sans-serif"><br>
Subject: </font><font size="1" color="#0000FF" face="sans-serif">Re: [openstack-dev] [barbican] Utilizing the KMIP plugin</font></p>
<p></p>
<hr width="100%" size="2" align="left" noshade="">
<font size="1" color="#0000FF" face="Calibri"><br>
<br>
<br>
Hello Christopher,<br>
<br>
Just checking, but is that barbican-api.conf file located in your local system’s /etc/barbican folder? If not that is the preferred place for local development. Modifying the copy that is in your local git repository will have no effect.<br>
<br>
Also, please double check that your local git repository’s setup.cfg has a line like this in there (at/around #35):<br>
<br>
kmip_plugin = barbican.plugin.kmip_secret_store:KMIPSecretStore<br>
<br>
Thanks,<br>
John<br>
<br>
<br>
<br>
</font><font size="2" color="#0000FF" face="Calibri"><b><br>
From: </b></font><font size="2" color="#0000FF" face="Calibri">Christopher N Solis <</font><a href="mailto:cnsolis@us.ibm.com"><font size="2" color="#0000FF" face="Calibri"><u>cnsolis@us.ibm.com</u></font></a><font size="2" color="#0000FF" face="Calibri">></font><font size="2" color="#0000FF" face="Calibri"><b><br>
Reply-To: </b></font><font size="2" color="#0000FF" face="Calibri">"</font><a href="mailto:openstack-dev@lists.openstack.org"><font size="2" color="#0000FF" face="Calibri"><u>openstack-dev@lists.openstack.org</u></font></a><font size="2" color="#0000FF" face="Calibri">"
<</font><a href="mailto:openstack-dev@lists.openstack.org"><font size="2" color="#0000FF" face="Calibri"><u>openstack-dev@lists.openstack.org</u></font></a><font size="2" color="#0000FF" face="Calibri">></font><font size="2" color="#0000FF" face="Calibri"><b><br>
Date: </b></font><font size="2" color="#0000FF" face="Calibri">Monday, April 6, 2015 at 10:25 AM</font><font size="2" color="#0000FF" face="Calibri"><b><br>
To: </b></font><font size="2" color="#0000FF" face="Calibri">"</font><a href="mailto:openstack-dev@lists.openstack.org"><font size="2" color="#0000FF" face="Calibri"><u>openstack-dev@lists.openstack.org</u></font></a><font size="2" color="#0000FF" face="Calibri">"
<</font><a href="mailto:openstack-dev@lists.openstack.org"><font size="2" color="#0000FF" face="Calibri"><u>openstack-dev@lists.openstack.org</u></font></a><font size="2" color="#0000FF" face="Calibri">></font><font size="2" color="#0000FF" face="Calibri"><b><br>
Subject: </b></font><font size="2" color="#0000FF" face="Calibri">[openstack-dev] [barbican] Utilizing the KMIP plugin</font>
<p><font size="2" color="#0000FF" face="sans-serif">Hello!<br>
<br>
Sorry to Kaitlin Farr for not responding directly to your e-mail. <br>
My openstack settings were misconfigured and I was not receiving e-mail from the dev mailing list.
<br>
Thanks for looking into the issue. <br>
<br>
I double checked the permissions at the bottom of the kmip_plugin part in the barbican-api.conf file
<br>
and they are set to 400. <br>
<br>
I would also like to note that I do not think the code ever actually entered the __init__ function<br>
of KMIPSecretStore. I put a breakpoint in the __init__ function but the debugger never gets open.
<br>
The error occurs and returns without ever seeming to enter the init function. <br>
<br>
Here are the parts of the barbican-api.conf file that concern the kmip_plugin: <br>
.....................<br>
[secretstore]<br>
namespace = barbican.secretstore.plugin<br>
enabled_secretstore_plugins = kmip_plugin<br>
.....................<br>
[kmip_plugin]<br>
username = '**********'<br>
password = '**********'<br>
host = ********<br>
port = ********<br>
keyfile = '/etc/barbican/rootCA.key'<br>
certfile = '/etc/barbican/rootCA.pem'<br>
ca_certs = '/etc/barbican/rootCA.pem'<br>
.......................<br>
<br>
Thank You!!<br>
<br>
Regards, <br>
Christopher Solis</font><font size="2" color="#0000FF" face="Calibri">__________________________________________________________________________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: </font><a href="mailto:OpenStack-dev-request@lists.openstack.org"><font size="2" color="#0000FF" face="Calibri"><u>OpenStack-dev-request@lists.openstack.org</u></font></a><font size="2" color="#0000FF" face="Calibri">?subject:unsubscribe</font><font size="2" color="#0000FF" face="Calibri"><u><br>
</u></font><a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev"><font size="2" color="#0000FF" face="Calibri"><u>http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</u></font></a><tt><font size="2">__________________________________________________________________________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="mailto:OpenStack-dev-request@lists.openstack.org">OpenStack-dev-request@lists.openstack.org</a>?subject:unsubscribe<br>
</font></tt><tt><font size="2"><a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a></font></tt><tt><font size="2"><br>
</font></tt><br>
<font size="2" face="sans-serif">[attachment "graycol.gif" deleted by Christopher N Solis/Austin/IBM]
</font><br>
</p>
</div>
</div>
</span>
</body>
</html>