[openstack-dev] [barbican] Using KMIP with Barbican (Utkarsh Simha)

Farr, Kaitlin M. Kaitlin.Farr at jhuapl.edu
Wed Mar 25 15:24:50 UTC 2015

Hi Utkarsh,

Specifying "kmip_plugin" in the barbican-api.conf is the correct way to
configure the plugin. In my previous debugging experience, I've found that I
get CryptoPluginNotFound if an error occurred during the plugin's __init__
method. For the KMIP plugin, this means the key file permissions were not
set to 400 or the PyKMIP KMIPProxy object could not be created with the
configuration options set. To debug this further, we'll need to log at the
logs for more clues.

Hope this helps!

Kaitlin Farr
Johns Hopkins University Applied Physics Laboratory


Date: Mon, 23 Mar 2015 16:56:43 +0530
From: Utkarsh Simha <utkarshsimha at gmail.com>
To: openstack-dev at lists.openstack.org
Subject: [openstack-dev] [barbican] Using KMIP with Barbican
        <CAHYfr2UcytKpNRrzsv+-jkkVmxEwz=rHCs2YBUj3bgMU8vdTew at mail.gmail.com>
Content-Type: text/plain; charset=UTF-8


I was wondering how it is possible to use an external Key Management
Server with Barbican? I have configured the barbican-api.conf file for
the KMIP Plugin and also set "enabled_crypto_plugins" to
"kmip_plugin", but it says "CryptoPluginNotFound"

Any help is appreciated! Thank you :)




More information about the OpenStack-dev mailing list