---
name: "sss_ssh_knownhostsproxy"
section: "1"
platform: "linux"
package: "sssd-common"
version: "2.8.2-4+deb12u1"
release: "Debian 12 (Bookworm)"
platforms: ["linux"]
url: "https://new.carta.tech/sss_ssh_knownhostsproxy"
---

# sss\_ssh\_knownhostsproxy(1)

get OpenSSH host keys

## NAME

sss\_ssh\_knownhostsproxy - get OpenSSH host keys

## SYNOPSIS

**sss\_ssh\_knownhostsproxy** \[*options*\] *HOST* \[*PROXY\_COMMAND*\]

## DESCRIPTION

**sss\_ssh\_knownhostsproxy** acquires SSH host public keys for host *HOST*, stores them in a custom OpenSSH known\_hosts file (see the “SSH\_KNOWN\_HOSTS FILE FORMAT” section of [**sshd**(8)](/sshd/8.md) for more information) /var/lib/sss/pubconf/known\_hosts and establishes the connection to the host.

If *PROXY\_COMMAND* is specified, it is used to create the connection to the host instead of opening a socket.

[**ssh**(1)](/ssh/1.md) can be configured to use **sss\_ssh\_knownhostsproxy** for host key authentication by using the following directives for [**ssh**(1)](/ssh/1.md) configuration:

```
ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h
GlobalKnownHostsFile /var/lib/sss/pubconf/known_hosts
```

## OPTIONS

- **-p**,**--port** *PORT*

  Use port *PORT* to connect to the host. By default, port 22 is used.

- **-d**,**--domain** *DOMAIN*

  Search for host public keys in SSSD domain *DOMAIN*.

- **-k**,**--pubkey**

  Print the host ssh public keys for host *HOST*.

- **-?**,**--help**

  Display help message and exit.

## EXIT STATUS

In case of success, an exit value of 0 is returned. Otherwise, 1 is returned.

## SEE ALSO

[**sssd**(8)](/sssd/8.md), [**sssd.conf**(5)](/sssd.conf/5.md), [**sssd-ldap**(5)](/sssd-ldap/5.md), [**sssd-krb5**(5)](/sssd-krb5/5.md), [**sssd-simple**(5)](/sssd-simple/5.md), [**sssd-ipa**(5)](/sssd-ipa/5.md), [**sssd-ad**(5)](/sssd-ad/5.md), [**sssd-files**(5)](/sssd-files/5.md), [**sssd-sudo**(5)](/sssd-sudo/5.md), [**sssd-session-recording**(5)](/sssd-session-recording/5.md), [**sss\_cache**(8)](/sss_cache/8.md), [**sss\_debuglevel**(8)](/sss_debuglevel/8.md), [**sss\_obfuscate**(8)](/sss_obfuscate/8.md), [**sss\_seed**(8)](/sss_seed/8.md), [**sssd\_krb5\_locator\_plugin**(8)](/sssd_krb5_locator_plugin/8.md), **sss\_ssh\_authorizedkeys**(8), **sss\_ssh\_knownhostsproxy**(8), [**sssd-ifp**(5)](/sssd-ifp/5.md), [**pam\_sss**(8)](/pam_sss/8.md). [**sss\_rpcidmapd**(5)](/sss_rpcidmapd/5.md) [**sssd-systemtap**(5)](/sssd-systemtap/5.md)

## AUTHORS

**The SSSD upstream - https://github.com/SSSD/sssd/**