{"action":"created","issue":{"url":"https://api.github.com/repos/hashicorp/vault/issues/4072","repository_url":"https://api.github.com/repos/hashicorp/vault","labels_url":"https://api.github.com/repos/hashicorp/vault/issues/4072/labels{/name}","comments_url":"https://api.github.com/repos/hashicorp/vault/issues/4072/comments","events_url":"https://api.github.com/repos/hashicorp/vault/issues/4072/events","html_url":"https://github.com/hashicorp/vault/issues/4072","id":302070961,"number":4072,"title":"plugin.vault-plugin-database-oracle: plugin tls init: error=\"error during token unwrap request: secret is nil","user":{"login":"bajju31","id":22060554,"avatar_url":"https://avatars0.githubusercontent.com/u/22060554?v=4","gravatar_id":"","url":"https://api.github.com/users/bajju31","html_url":"https://github.com/bajju31","followers_url":"https://api.github.com/users/bajju31/followers","following_url":"https://api.github.com/users/bajju31/following{/other_user}","gists_url":"https://api.github.com/users/bajju31/gists{/gist_id}","starred_url":"https://api.github.com/users/bajju31/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bajju31/subscriptions","organizations_url":"https://api.github.com/users/bajju31/orgs","repos_url":"https://api.github.com/users/bajju31/repos","events_url":"https://api.github.com/users/bajju31/events{/privacy}","received_events_url":"https://api.github.com/users/bajju31/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":11,"created_at":"2018-03-04T09:30:04Z","updated_at":"2018-03-04T23:23:40Z","closed_at":null,"author_association":"NONE","body":"<!-- Please reserve GitHub issues for bug reports and feature requests.\r\n\r\nFor questions, the best place to get answers is on our [mailing list](https://groups.google.com/forum/#!forum/vault-tool), as they will get more visibility from experienced users than the issue tracker.\r\n\r\nPlease note: We take Vault's security and our users' trust very seriously. If you believe you have found a security issue in Vault, please responsibly disclose by contacting us at security@hashicorp.com. Our PGP key is available at [our security page](https://www.hashicorp.com/security/).\r\n-->\r\n\r\n\r\n<!-- Uncomment this section if this is a feature request. Include or exclude other sections as deemed appropriate.\r\n**Feature Request:**\r\n-->\r\n\r\n**Environment:**\r\n0.9.5\r\n\r\n* Vault Version:\r\n* Operating System/Architecture:\r\nUbuntu 16_04 \r\n\r\n**Vault Config File:**\r\n<!-- Configuration file used for the vault server. -->\r\n* plugin directory under vault home */\r\nplugin_directory = \"/opt/vault/plugin\"\r\napi_addr = \"https://127.0.0.1:8300\"\r\n# also tried API address with only http\r\n# also tried api address with 0.0.0.0\r\n\r\nmax_lease_ttl = \"10h\"\r\ndefault_lease_ttl = \"4h\"\r\n\r\nstorage \"inmem\" {\r\n  path = \"/opt/vault/data\"\r\n}\r\n\r\nlistener \"tcp\" {\r\n    address = \"0.0.0.0:8210\"\r\n    tls_disable = \"false\"\r\n    // decrypted certificate key\r\n    tls_cert_file = \"tls/vault.server.pem\"\r\n    // decrypted private key\r\n    tls_key_file  = \"tls/localhost.decrypted.key.pem\"\r\n    tls_require_and_verify_client_cert = \"false\"\r\n    tls_client_ca_file = \"tls/vault.server.pem\"\r\n}\r\n\r\ndisable_mlock = true /* for dev, mlock is not available on WSL */\r\n**Startup Log Output:**\r\n\r\n<!-- Logs from vault's output on startup, if available. -->\r\nvault server -dev -config config/d.hcl\r\n==> Vault server configuration:\r\n\r\n                     Cgo: disabled\r\n         Cluster Address: https://127.0.0.1:8301\r\n              Listener 1: tcp (addr: \"127.0.0.1:8200\", cluster address: \"127.0.0.1:8201\", tls: \"disabled\")\r\n              Listener 2: tcp (addr: \"0.0.0.0:8210\", cluster address: \"0.0.0.0:8211\", tls: \"enabled\")\r\n               Log Level: info\r\n                   Mlock: supported: true, enabled: false\r\n        Redirect Address: https://127.0.0.1:8300\r\n                 Storage: inmem\r\n                 Version: Vault v0.9.5\r\n             Version Sha: 36edb4d42380d89a897e7f633046423240b710d9\r\n\r\nWARNING! dev mode is enabled! In this mode, Vault runs entirely in-memory\r\nand starts unsealed with a single unseal key. The root token is already\r\nauthenticated to the CLI, so you can immediately begin using Vault.\r\n\r\nYou may need to set the following environment variable:\r\n\r\n    $ export VAULT_ADDR='http://127.0.0.1:8200'\r\n\r\nThe unseal key and root token are displayed below in case you want to\r\nseal/unseal the Vault or re-authenticate.\r\n\r\nUnseal Key: 20Uy70tsNc4aHQWMqPLDrSg8GYl7Z1CQnFsU8Y2e7WI=\r\nRoot Token: 755aa7de-c507-c88d-b915-cc23cacaf258\r\n\r\nDevelopment mode should NOT be used in production installations!\r\n\r\n**Expected Behavior:**\r\n<!-- What should have happened? -->\r\nPlugin keeps on failing, when trying to register it with below  \r\n\r\nvault write database/config/HSHCRPDB plugin_name=vault-plugin-database-oracle connection_url=hshcrp/hashicorp@//localhost:1521/HSHCRPDB 'allowed_roles=[admin, readWrite, readOnly]'\r\n\r\nplugin is downloaded and available on the plugins directory. \r\nInstant client is installed and folder on LD_LIBRARY_PATH \r\n\r\n**Actual Behavior:**\r\n<!-- What actually happened? -->\r\nErrors below \r\n\r\n2018/03/04 04:23:17.288587 [INFO ] core: successful mount: path=database/ type=database\r\n2018/03/04 04:23:22.036030 [ERROR] plugin.vault-plugin-database-oracle: plugin tls init: error=\"error during token unwrap request: secret is nil\"\r\n**Steps to Reproduce:**\r\n\r\n<!-- List the steps required to reproduce the issue. -->\r\nUse \r\nvault 0.9.5\r\nlatest version of oracle plugin \r\nconfig file as above, running in dev mode (without dev mode also same issue) \r\n\r\n**Important Factoids:**\r\n<!-- Describe any atypical environment setup, if any. -->\r\n\r\n**References:**\r\n<!-- Link to any references, such as GitHub issues or pull requests. -->\r\n"},"comment":{"url":"https://api.github.com/repos/hashicorp/vault/issues/comments/370274250","html_url":"https://github.com/hashicorp/vault/issues/4072#issuecomment-370274250","issue_url":"https://api.github.com/repos/hashicorp/vault/issues/4072","id":370274250,"user":{"login":"jefferai","id":28627,"avatar_url":"https://avatars0.githubusercontent.com/u/28627?v=4","gravatar_id":"","url":"https://api.github.com/users/jefferai","html_url":"https://github.com/jefferai","followers_url":"https://api.github.com/users/jefferai/followers","following_url":"https://api.github.com/users/jefferai/following{/other_user}","gists_url":"https://api.github.com/users/jefferai/gists{/gist_id}","starred_url":"https://api.github.com/users/jefferai/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jefferai/subscriptions","organizations_url":"https://api.github.com/users/jefferai/orgs","repos_url":"https://api.github.com/users/jefferai/repos","events_url":"https://api.github.com/users/jefferai/events{/privacy}","received_events_url":"https://api.github.com/users/jefferai/received_events","type":"User","site_admin":false},"created_at":"2018-03-04T23:23:40Z","updated_at":"2018-03-04T23:23:40Z","author_association":"OWNER","body":"Whether api_addr is necessary depends on your setup but it never hurts to define it. It should be the address used to reach your Vault server's API, just as from the CLI. So this will almost always be port 8200 unless you change it to something else like 8210."}}
{"actor":{"display_login":"jefferai"}}