Open Stack

Hi Chris,

I would be happy to help you with the trouble you've encountered using the
KMIP plugin. From what you've described, it sounds like you have everything
set up correctly. If you've specified kmip_plugin under
enabled_secret_store_plugins, then the reason it would give you
SecretStorePluginsNotConfigured is if it had encountered an error in the
KMIPSecretStore __init__ method. Just to be sure, the permissions of the file
that you specified under the "keyfile" config option are 400, correct? Are
there any other error messages earlier in the logs?

Feel free to pass along your barbican-api.conf (changing any proprietary
information, of course) if you'd like another set of eyes to look at it.

Thanks,

Kaitlin Farr
Software Engineer
JHU/APL

-------------------------------------

Message: 39
Date: Fri, 3 Apr 2015 15:03:10 -0500
From: Christopher N Solis <cnsolis at us.ibm.com>
To: openstack-dev at lists.openstack.org
Subject: [openstack-dev] [barbican] Utilizing the KMIP plugin
Message-ID:
        <OFC57FFB97.98250FC0-ON87257E1C.006E0D6A-86257E1C.006E2BEC at us.ibm.com>
Content-Type: text/plain; charset="us-ascii"



Hello!
I am having some trouble with the kmip_plugin and would like some help.

When I make a call to barbican to store a secret it returns the following
error:

2015-04-03 12:33:17,279 - barbican.api.controllers - ERROR - Secret
creation failure seen - please contact site administrator.
Traceback (most recent call last):
  File "/home/swift/barbican/barbican/api/controllers/__init__.py", line
98, in handler
    return fn(inst, *args, **kwargs)
  File "/home/swift/barbican/barbican/api/controllers/__init__.py", line
84, in enforcer
    return fn(inst, *args, **kwargs)
  File "/home/swift/barbican/barbican/api/controllers/__init__.py", line
140, in content_types_enforcer
    return fn(inst, *args, **kwargs)
  File "/home/swift/barbican/barbican/api/controllers/secrets.py", line
294, in on_post
    transport_key_id=data.get('transport_key_id'))
  File "/home/swift/barbican/barbican/plugin/resources.py", line 101, in
store_secret
    key_spec=key_spec, plugin_name=plugin_name)
  File "/home/swift/barbican/barbican/plugin/interface/secret_store.py",
line 477, in _check_plugins_configured
    raise SecretStorePluginsNotConfigured()
SecretStorePluginsNotConfigured: No secret store plugins have been
configured

In the barbican-api.conf file I have set enabled_secretstore_plugins to
kmip_plugin.
I have also updated the kmip_plugin part of the file to point to the host
and port where my kmip Key Manager is running
with all the required credentials and ssl certs.
I also made sure the ssl requirements are set to permissions 400.

Is there something I am missing that is causing this problem?

Thank You!!

- Christopher Solis
Regards,

  CHRIS SOLIS

Software Developer - Cloud Infrastructure Services Security



   Phone: 1-512-286-6458 | Mobile:                                IBM
   1-210-844-5913
   E-mail: cnsolis at us.ibm.com                         11501 Burnet Rd
                                                Austin, TX 78758-3400
                                                        United States