[openstack-dev] [barbican] Using KMIP with Barbican (Utkarsh Simha)

Kelsey, Timothy John tim.kelsey at hp.com
Thu Mar 26 12:28:36 UTC 2015

Hi Utkarsh,

I am also happy to help figure out whats going in here, as Kaitlin says,
the first step is get some more log info.

Tim Kelsey

Cloud Security Engineer
HP Helion

On 25/03/2015 15:24, "Farr, Kaitlin M." <Kaitlin.Farr at jhuapl.edu> wrote:

>Hi Utkarsh,
>Specifying "kmip_plugin" in the barbican-api.conf is the correct way to
>configure the plugin. In my previous debugging experience, I've found
>that I
>get CryptoPluginNotFound if an error occurred during the plugin's __init__
>method. For the KMIP plugin, this means the key file permissions were not
>set to 400 or the PyKMIP KMIPProxy object could not be created with the
>configuration options set. To debug this further, we'll need to log at the
>logs for more clues.
>Hope this helps!
>Kaitlin Farr
>Johns Hopkins University Applied Physics Laboratory
>Date: Mon, 23 Mar 2015 16:56:43 +0530
>From: Utkarsh Simha <utkarshsimha at gmail.com>
>To: openstack-dev at lists.openstack.org
>Subject: [openstack-dev] [barbican] Using KMIP with Barbican
><CAHYfr2UcytKpNRrzsv+-jkkVmxEwz=rHCs2YBUj3bgMU8vdTew at mail.gmail.com>
>Content-Type: text/plain; charset=UTF-8
>I was wondering how it is possible to use an external Key Management
>Server with Barbican? I have configured the barbican-api.conf file for
>the KMIP Plugin and also set "enabled_crypto_plugins" to
>"kmip_plugin", but it says "CryptoPluginNotFound"
>Any help is appreciated! Thank you :)
>OpenStack Development Mailing List (not for usage questions)
>Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe

More information about the OpenStack-dev mailing list