3726777f47ac4bba3e21b075905959bbea47e72eerikabele<?xml version="1.0" encoding="UTF-8"?>

3726777f47ac4bba3e21b075905959bbea47e72eerikabele<!DOCTYPE reference PUBLIC "-//OASIS//DTD DocBook V4.4//EN"

3726777f47ac4bba3e21b075905959bbea47e72eerikabele"http://www.oasis-open.org/docbook/xml/4.4/docbookx.dtd">

3726777f47ac4bba3e21b075905959bbea47e72eerikabele<reference>

3726777f47ac4bba3e21b075905959bbea47e72eerikabele<title>SSSD Manual pages</title>

3726777f47ac4bba3e21b075905959bbea47e72eerikabele<refentry>

3726777f47ac4bba3e21b075905959bbea47e72eerikabele <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="include/upstream.xml" />

3726777f47ac4bba3e21b075905959bbea47e72eerikabele

3726777f47ac4bba3e21b075905959bbea47e72eerikabele <refmeta>

3726777f47ac4bba3e21b075905959bbea47e72eerikabele <refentrytitle>sss_ssh_knownhostsproxy</refentrytitle>

3726777f47ac4bba3e21b075905959bbea47e72eerikabele <manvolnum>1</manvolnum>

3726777f47ac4bba3e21b075905959bbea47e72eerikabele </refmeta>

3726777f47ac4bba3e21b075905959bbea47e72eerikabele

3726777f47ac4bba3e21b075905959bbea47e72eerikabele <refnamediv id='name'>

d3cd98e7839dd1c737c18d42a916ed20860a50e1nd <refname>sss_ssh_knownhostsproxy</refname>

d3cd98e7839dd1c737c18d42a916ed20860a50e1nd <refpurpose>get OpenSSH host keys</refpurpose>

d3cd98e7839dd1c737c18d42a916ed20860a50e1nd </refnamediv>

3726777f47ac4bba3e21b075905959bbea47e72eerikabele

3726777f47ac4bba3e21b075905959bbea47e72eerikabele <refsynopsisdiv id='synopsis'>

3726777f47ac4bba3e21b075905959bbea47e72eerikabele <cmdsynopsis>

3c56725151a46fef84ce376d709b5339da28e10fnd <command>sss_ssh_knownhostsproxy</command>

8a72c24379e10c3f3d0dfe352bf15e45ee65c179nd <arg choice='opt'>

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd <replaceable>options</replaceable>

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd </arg>

8a72c24379e10c3f3d0dfe352bf15e45ee65c179nd <arg choice='plain'><replaceable>HOST</replaceable></arg>

8a72c24379e10c3f3d0dfe352bf15e45ee65c179nd <arg choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>

8a72c24379e10c3f3d0dfe352bf15e45ee65c179nd </cmdsynopsis>

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd </refsynopsisdiv>

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd

3726777f47ac4bba3e21b075905959bbea47e72eerikabele <refsect1 id='description'>

3726777f47ac4bba3e21b075905959bbea47e72eerikabele <title>DESCRIPTION</title>

3726777f47ac4bba3e21b075905959bbea47e72eerikabele <para>

3726777f47ac4bba3e21b075905959bbea47e72eerikabele <command>sss_ssh_knownhostsproxy</command> acquires SSH host

3726777f47ac4bba3e21b075905959bbea47e72eerikabele public keys for host <replaceable>HOST</replaceable>, stores

d3cd98e7839dd1c737c18d42a916ed20860a50e1nd them in a custom OpenSSH known_hosts file (see the

d3cd98e7839dd1c737c18d42a916ed20860a50e1nd <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section of

d3cd98e7839dd1c737c18d42a916ed20860a50e1nd <citerefentry><refentrytitle>sshd</refentrytitle>

3726777f47ac4bba3e21b075905959bbea47e72eerikabele <manvolnum>8</manvolnum></citerefentry> for more

3726777f47ac4bba3e21b075905959bbea47e72eerikabele information) and estabilishes connection to the host.

d3cd98e7839dd1c737c18d42a916ed20860a50e1nd </para>

d3cd98e7839dd1c737c18d42a916ed20860a50e1nd <para>

d3cd98e7839dd1c737c18d42a916ed20860a50e1nd If <replaceable>PROXY_COMMAND</replaceable> is specified,

3726777f47ac4bba3e21b075905959bbea47e72eerikabele it is used to create the connection to the host instead of

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd opening a socket.

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd </para>

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd <para>

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd <citerefentry><refentrytitle>ssh</refentrytitle>

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd <manvolnum>1</manvolnum></citerefentry> can be configured to

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd use <command>sss_ssh_knownhostsproxy</command> for host key

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd authentication by using the following directives for

3726777f47ac4bba3e21b075905959bbea47e72eerikabele <citerefentry><refentrytitle>ssh</refentrytitle>

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd <manvolnum>1</manvolnum></citerefentry> configuration:

d03dd7e22aeb4b6940fb43d02db1233c1bedd799nd<programlisting>

3726777f47ac4bba3e21b075905959bbea47e72eerikabeleProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h

3726777f47ac4bba3e21b075905959bbea47e72eerikabeleUserKnownHostsFile2 .ssh/sss_known_hosts

3726777f47ac4bba3e21b075905959bbea47e72eerikabele</programlisting>

d3cd98e7839dd1c737c18d42a916ed20860a50e1nd </para>

d3cd98e7839dd1c737c18d42a916ed20860a50e1nd <para>

d3cd98e7839dd1c737c18d42a916ed20860a50e1nd <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="include/experimental.xml" />

3726777f47ac4bba3e21b075905959bbea47e72eerikabele </para>

3726777f47ac4bba3e21b075905959bbea47e72eerikabele </refsect1>

d3cd98e7839dd1c737c18d42a916ed20860a50e1nd

d3cd98e7839dd1c737c18d42a916ed20860a50e1nd <refsect1 id='options'>

d3cd98e7839dd1c737c18d42a916ed20860a50e1nd <title>OPTIONS</title>

d3cd98e7839dd1c737c18d42a916ed20860a50e1nd <variablelist remap='IP'>

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd <varlistentry>

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd <term>

8a72c24379e10c3f3d0dfe352bf15e45ee65c179nd <option>-f</option>,<option>--file</option>

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd <replaceable>FILE</replaceable>

3726777f47ac4bba3e21b075905959bbea47e72eerikabele </term>

8a72c24379e10c3f3d0dfe352bf15e45ee65c179nd <listitem>

3726777f47ac4bba3e21b075905959bbea47e72eerikabele <para>

d3cd98e7839dd1c737c18d42a916ed20860a50e1nd Store host public keys in file <replaceable>FILE</replaceable>.

d3cd98e7839dd1c737c18d42a916ed20860a50e1nd By default, <filename>.ssh/sss_known_hosts</filename> is used.

d3cd98e7839dd1c737c18d42a916ed20860a50e1nd </para>

3726777f47ac4bba3e21b075905959bbea47e72eerikabele </listitem>

d3cd98e7839dd1c737c18d42a916ed20860a50e1nd </varlistentry>

d3cd98e7839dd1c737c18d42a916ed20860a50e1nd <varlistentry>

d3cd98e7839dd1c737c18d42a916ed20860a50e1nd <term>

d3cd98e7839dd1c737c18d42a916ed20860a50e1nd <option>-p</option>,<option>--port</option>

3726777f47ac4bba3e21b075905959bbea47e72eerikabele <replaceable>PORT</replaceable>

3726777f47ac4bba3e21b075905959bbea47e72eerikabele </term>

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd <listitem>

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd <para>

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd Use port <replaceable>PORT</replaceable> to connect to the host.

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd By default, port 22 is used.

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd </para>

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd </listitem>

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd </varlistentry>

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd <varlistentry>

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd <term>

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd <option>-d</option>,<option>--domain</option>

8a72c24379e10c3f3d0dfe352bf15e45ee65c179nd <replaceable>DOMAIN</replaceable>

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd </term>

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd <listitem>

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd <para>

8a72c24379e10c3f3d0dfe352bf15e45ee65c179nd Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>.

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd </para>

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd </listitem>

480bee29abcc415b6b8c18d2ecbf2c5f88f1f05bnd </varlistentry>

480bee29abcc415b6b8c18d2ecbf2c5f88f1f05bnd <xi:include xmlns:xi="http://www.w3.org/2001/XInclude" href="include/param_help.xml" />

480bee29abcc415b6b8c18d2ecbf2c5f88f1f05bnd </variablelist>

480bee29abcc415b6b8c18d2ecbf2c5f88f1f05bnd </refsect1>

480bee29abcc415b6b8c18d2ecbf2c5f88f1f05bnd

480bee29abcc415b6b8c18d2ecbf2c5f88f1f05bnd <refsect1 id='see_also'>

480bee29abcc415b6b8c18d2ecbf2c5f88f1f05bnd <title>SEE ALSO</title>

480bee29abcc415b6b8c18d2ecbf2c5f88f1f05bnd <para>

480bee29abcc415b6b8c18d2ecbf2c5f88f1f05bnd <citerefentry>

480bee29abcc415b6b8c18d2ecbf2c5f88f1f05bnd <refentrytitle>ssh</refentrytitle><manvolnum>8</manvolnum>

480bee29abcc415b6b8c18d2ecbf2c5f88f1f05bnd </citerefentry>,

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd <citerefentry>

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd <refentrytitle>ssh_config</refentrytitle><manvolnum>5</manvolnum>

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd </citerefentry>,

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd <citerefentry>

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd <refentrytitle>sss_ssh_authorizedkeys</refentrytitle><manvolnum>1</manvolnum>

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd </citerefentry>.

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd </para>

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd </refsect1>

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd</refentry>

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd</reference>

a8571599bf3a6921cc0b9f609009e4ec1f59e1d0nd