[openstack-dev] [barbican] Using KMIP with Barbican (Utkarsh Simha)
Kelsey, Timothy John
tim.kelsey at hp.com
Thu Mar 26 12:28:36 UTC 2015
Hi Utkarsh,
I am also happy to help figure out whats going in here, as Kaitlin says,
the first step is get some more log info.
--
Tim Kelsey
Cloud Security Engineer
HP Helion
On 25/03/2015 15:24, "Farr, Kaitlin M." <Kaitlin.Farr at jhuapl.edu> wrote:
>Hi Utkarsh,
>
>Specifying "kmip_plugin" in the barbican-api.conf is the correct way to
>configure the plugin. In my previous debugging experience, I've found
>that I
>get CryptoPluginNotFound if an error occurred during the plugin's __init__
>method. For the KMIP plugin, this means the key file permissions were not
>set to 400 or the PyKMIP KMIPProxy object could not be created with the
>configuration options set. To debug this further, we'll need to log at the
>logs for more clues.
>
>Hope this helps!
>
>Kaitlin Farr
>Johns Hopkins University Applied Physics Laboratory
>
>
>------------------------------
>
>Date: Mon, 23 Mar 2015 16:56:43 +0530
>From: Utkarsh Simha <utkarshsimha at gmail.com>
>To: openstack-dev at lists.openstack.org
>Subject: [openstack-dev] [barbican] Using KMIP with Barbican
>Message-ID:
>
><CAHYfr2UcytKpNRrzsv+-jkkVmxEwz=rHCs2YBUj3bgMU8vdTew at mail.gmail.com>
>Content-Type: text/plain; charset=UTF-8
>
>Hello!
>
>I was wondering how it is possible to use an external Key Management
>Server with Barbican? I have configured the barbican-api.conf file for
>the KMIP Plugin and also set "enabled_crypto_plugins" to
>"kmip_plugin", but it says "CryptoPluginNotFound"
>
>Any help is appreciated! Thank you :)
>
>--
>Regards
>
>
>
>------------------------------
>
>*********************************************
>
>__________________________________________________________________________
>OpenStack Development Mailing List (not for usage questions)
>Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
>http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
More information about the OpenStack-dev
mailing list