ERROR barbican.plugin

[zhubingbing]

2017-03-10 04:43:55.808 19 WARNING keystonemiddleware.auth_token [-] AuthToken middleware is set with keystone_authtoken.service_token_roles_required set to False. This is backwards compatible but deprecated behaviour. Please set this to True.
2017-03-10 04:47:53.016 19 ERROR barbican.plugin.util.utils [req-489a0888-e14d-45ab-8fc9-0177f9811e7e 9e0ea7a6615240859e6ab72867ea3902 - - default default] Problem seen creating plugin: 'p11_crypto'
2017-03-10 04:47:53.016 19 ERROR barbican.plugin.util.utils Traceback (most recent call last):
2017-03-10 04:47:53.016 19 ERROR barbican.plugin.util.utils File "/var/lib/kolla/venv/lib/python2.7/site-packages/barbican/plugin/util/utils.py", line 42, in instantiate_plugins
2017-03-10 04:47:53.016 19 ERROR barbican.plugin.util.utils plugin_instance = ext.plugin(*invoke_args, **invoke_kwargs)
2017-03-10 04:47:53.016 19 ERROR barbican.plugin.util.utils File "/var/lib/kolla/venv/lib/python2.7/site-packages/barbican/plugin/crypto/p11_crypto.py", line 97, in __init__
2017-03-10 04:47:53.016 19 ERROR barbican.plugin.util.utils self.pkcs11 = pkcs11 or self._create_pkcs11(plugin_conf, ffi)
2017-03-10 04:47:53.016 19 ERROR barbican.plugin.util.utils File "/var/lib/kolla/venv/lib/python2.7/site-packages/barbican/plugin/crypto/p11_crypto.py", line 284, in _create_pkcs11
2017-03-10 04:47:53.016 19 ERROR barbican.plugin.util.utils seed_random_buffer=seed_random_buffer,
2017-03-10 04:47:53.016 19 ERROR barbican.plugin.util.utils File "/var/lib/kolla/venv/lib/python2.7/site-packages/barbican/plugin/crypto/pkcs11.py", line 330, in __init__
2017-03-10 04:47:53.016 19 ERROR barbican.plugin.util.utils self.lib = self.ffi.dlopen(library_path)
2017-03-10 04:47:53.016 19 ERROR barbican.plugin.util.utils File "/var/lib/kolla/venv/lib/python2.7/site-packages/cffi/api.py", line 139, in dlopen
2017-03-10 04:47:53.016 19 ERROR barbican.plugin.util.utils lib, function_cache = _make_ffi_library(self, name, flags)

2017-03-10 04:47:53.016 19 ERROR barbican.plugin.util.utils File "/var/lib/kolla/venv/lib/python2.7/site-packages/cffi/api.py", line 769, in _make_ffi_library
2017-03-10 04:47:53.016 19 ERROR barbican.plugin.util.utils backendlib = _load_backend_lib(backend, libname, flags)
2017-03-10 04:47:53.016 19 ERROR barbican.plugin.util.utils File "/var/lib/kolla/venv/lib/python2.7/site-packages/cffi/api.py", line 758, in _load_backend_lib
2017-03-10 04:47:53.016 19 ERROR barbican.plugin.util.utils return backend.load_library(name, flags)
2017-03-10 04:47:53.016 19 ERROR barbican.plugin.util.utils OSError: cannot load library /usr/lib/libCryptoki2_64.so: /usr/lib/libCryptoki2_64.so: cannot open shared object file: No such file or directory
2017-03-10 04:47:53.016 19 ERROR barbican.plugin.util.utils

[zhubingbing (zhubingbing)]

that library '/usr/lib/libCryptoki2_64.so' is provided by SafeNET as part of the service agreement when we shoud purchase a SafeNET Luna SA HSM,so it shoud not is the default in our conf file because most folks using the PKCS#11 backend are usinge SafeNET Lunas.

this is the product page by the vendor: https://safenet.gemalto.com/data-encryption/hardware-security-modules-hsms/safenet-network-hsm/

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/444561

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/444561
Committed: https://git.openstack.org/cgit/openstack/kolla-ansible/commit/?id=6d0e31f2320d382b40747a75c56b069baa28c445
Submitter: Jenkins
Branch: master

commit 6d0e31f2320d382b40747a75c56b069baa28c445
Author: zhubingbing <email address hidden>
Date: Sat Mar 11 15:29:45 2017 +0800

    Fix can't find /usr/lib/libCryptoki2_64.so in barbican

    Link https://docs.openstack.org/project-install-guide/key-manager/newton/barbican-backend.html#simple-crypto-plugin

    Change-Id: I351738c2a98090c56ac69e477fbe5ddec4cc5b26
    Closes-Bug: #1672001

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/448911
Committed: https://git.openstack.org/cgit/openstack/kolla-ansible/commit/?id=b6d9e4bd1d2e1158449ba4da98abb7ac84e17dbb
Submitter: Jenkins
Branch: stable/ocata

commit b6d9e4bd1d2e1158449ba4da98abb7ac84e17dbb
Author: zhubingbing <email address hidden>
Date: Sat Mar 11 15:29:45 2017 +0800

    Fix can't find /usr/lib/libCryptoki2_64.so in barbican

    Link https://docs.openstack.org/project-install-guide/key-manager/newton/barbican-backend.html#simple-crypto-plugin

    Change-Id: I351738c2a98090c56ac69e477fbe5ddec4cc5b26
    Closes-Bug: #1672001
    (cherry picked from commit 6d0e31f2320d382b40747a75c56b069baa28c445)

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/kolla-ansible 4.0.1 release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/kolla-ansible 5.0.0.0b2 development milestone.