Configuration Parameters
Global Configuration Parameters
Parameter |
Type |
Required (Yes/No) |
Default Value |
Description |
|---|---|---|---|---|
ip |
String |
Yes |
- |
Listening IP address. Only standard IPv4 addresses are supported. |
port |
Int |
Yes |
- |
Listening port number. |
caPath |
String |
Yes |
- |
Path to the CA certificate file (in PEM format) |
certPath |
String |
Yes |
- |
Path to the TLS certificate file (in PEM format) |
privateKeyPath |
String |
Yes |
- |
Path to the TLS private key file (in PEM format, PKCS#1 or PKCS#8) |
crlPath |
String |
No |
"" |
Path to the certificate revocation list (CRL) file (in PEM format). This parameter is left blank by default. |
raPublicKeyPath |
String |
Yes |
- |
Path to the remote attestation public key file (in PEM format, used to verify the signature of the RA agent). |
logPath |
String |
Yes |
- |
Log file path |
dataPath |
String |
Yes |
- |
Persistent directory path |
logMaxSize |
Int |
No |
10 |
Maximum size of a single log file |
logBackupCount |
Int |
No |
5 |
Maximum number of log rotation backups |
minLogLevel |
String |
No |
info |
Minimum log output level. Supported values are debug, info, warn, and error (case-insensitive). |
plugins |
Vec |
No |
[] |
Plugin configuration list. This parameter is left blank by default. Only the list format is supported. |
Plugin Configuration (plugins Array)
Parameter |
Type |
Required (Yes/No) |
Default Value |
Description |
|---|---|---|---|---|
plugins.name |
String |
Yes |
- |
Plugin name, used to identify the plugin. |
plugins.path |
String |
Yes |
- |
Path to the plugin dynamic library (.so file) |
plugins.param |
Object |
No |
{} |
Plugin initialization parameter, which must be in JSON object format. |
Starting kdc_agent
# Use systemd for management systemctl enable kdcagent systemctl start kdcagent
Precautions
- All paths must be absolute paths with a maximum length of 4096 characters.
- Except for logPath and dataPath, whose referenced directories do not need to exist beforehand, all other certificate-related file paths must exist.
- The dataPath parameter must specify a directory path, not a file path.
- Fields marked as optional can be omitted. If specified, they must meet the required formats and conditions.
- The plugins parameter must be a list, and plugins.param must be in JSON object format.
- All certificates, private keys, and CRLs must be in PEM format. There is no restriction on the encryption algorithm.