sss_ssh_knownhostsproxy1
Get openssh host keys
Usage
sss_ssh_knownhostsproxy [options]
HOST
[PROXY_COMMAND]
Overview
sss_ssh_knownhostsproxy acquires SSH host public keys for host HOST, stores them in a custom OpenSSH known_hosts file (see the “SSH_KNOWN_HOSTS FILE FORMAT” section of sshd(8) for more information) /var/lib/sss/pubconf/known_hosts and establishes the connection to the host.
If PROXY_COMMAND is specified, it is used to create the connection to the host instead of opening a socket.
ssh(1) can be configured to use sss_ssh_knownhostsproxy for host key authentication by using the following directives for ssh(1) configuration:
ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h GlobalKnownHostsFile /var/lib/sss/pubconf/known_hosts
Options
-
-p,--port PORT -
Use port PORT to connect to the host. By default, port 22 is used.
-
-d,--domain DOMAIN -
Search for host public keys in SSSD domain DOMAIN.
-
-k,--pubkey -
Print the host ssh public keys for host HOST.
-
-?,--help -
Display help message and exit.
Exit status
In case of success, an exit value of 0 is returned. Otherwise, 1 is returned.
History
- Debian 12 (Bookworm): the text shown here
- Debian 11 (Bullseye)
- Debian 10 (Buster)
- Debian 9 (Stretch)
- Debian 8 (Jessie)
- Debian 7 (Wheezy)
--pubkey since Debian 11 (Bullseye);
-? since Debian 8 (Jessie);
-k since Debian 10 (Buster).
--pubkeys until Debian 10 (Buster);
-h until Debian 7 (Wheezy).