Public bug reported:

During integration barbican with dogtag, I faced an issue that NSS DB is
not possible to be created during first request. It seems that file
which has to be temporarly created for storing NSS DB password, has some
troubles during creation. A part of failing code is:
https://raw.githubusercontent.com/dogtagpki/pki/master/base/common/python/pki/crypto.py

Specific part of code responsible for fault is:
http://paste.openstack.org/show/800374/

It leads to this error in barbican api logs:


When I made a "dirty hack" which is:
- creation of /etc/barbican/temp file with chmod 777
- add such part of code to crypto.py: http://paste.openstack.org/show/800375/

This problem is solved. But for me it looks like some kind of issues
with python versions, but it's just my guess.

OS and packages details:

Distributor ID: Ubuntu
Description:    Ubuntu 18.04.5 LTS
Release:        18.04
Codename:       bionic

Barbican packages:
ii  barbican-api                             1:8.0.1-0ubuntu1~cloud0            
             all          OpenStack Key Management Service - API Server
ii  barbican-common                          1:8.0.1-0ubuntu1~cloud0            
             all          OpenStack Key Management Service - common files
ii  barbican-keystone-listener               1:8.0.1-0ubuntu1~cloud0            
             all          OpenStack Key Management Service - Keystone Listener
ii  barbican-worker                          1:8.0.1-0ubuntu1~cloud0            
             all          OpenStack Key Management Service - Worker Node
ii  python3-barbican                         1:8.0.1-0ubuntu1~cloud0            
             all          OpenStack Key Management Service - Python 3 files

PKI packages:
ii  pki-base                                 10.6.0-1ubuntu2                    
             all          Certificate System - PKI Framework
ii  pki-base-java                            10.6.0-1ubuntu2                    
             all          Certificate System - PKI Framework -- java client 
support
ii  pki-tools                                10.6.0-1ubuntu2                    
             amd64        Certificate System - PKI Tools
ii  python3-pki-base                         10.6.0-1ubuntu2                    
             all          Certificate System - PKI Framework -- python3 client 
support

** Affects: barbican (Ubuntu)
     Importance: Undecided
         Status: Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1905473

Title:
  NSS DB can't be created with barbican stein

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/barbican/+bug/1905473/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to