---
name: "sss_ssh_knownhostsproxy"
section: "1"
platform: "linux"
package: "sssd-common"
version: "2.8.2-4+deb12u1"
release: "Debian 12 (Bookworm)"
platforms: ["linux"]
url: "https://carta.tech/man/sss_ssh_knownhostsproxy"
---

# sss\_ssh\_knownhostsproxy(1)

get OpenSSH host keys

## NAME

sss\_ssh\_knownhostsproxy - get OpenSSH host keys

## SYNOPSIS

**sss\_ssh\_knownhostsproxy** \[*options*\] *HOST* \[*PROXY\_COMMAND*\]

## DESCRIPTION

**sss\_ssh\_knownhostsproxy** acquires SSH host public keys for host *HOST*, stores them in a custom OpenSSH known\_hosts file (see the “SSH\_KNOWN\_HOSTS FILE FORMAT” section of [**sshd**(8)](/man/sshd/8.md) for more information) /var/lib/sss/pubconf/known\_hosts and establishes the connection to the host.

If *PROXY\_COMMAND* is specified, it is used to create the connection to the host instead of opening a socket.

[**ssh**(1)](/man/ssh/1.md) can be configured to use **sss\_ssh\_knownhostsproxy** for host key authentication by using the following directives for [**ssh**(1)](/man/ssh/1.md) configuration:

```
ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h
GlobalKnownHostsFile /var/lib/sss/pubconf/known_hosts
```

## OPTIONS

- **-p**,**--port** *PORT*

  Use port *PORT* to connect to the host. By default, port 22 is used.

- **-d**,**--domain** *DOMAIN*

  Search for host public keys in SSSD domain *DOMAIN*.

- **-k**,**--pubkey**

  Print the host ssh public keys for host *HOST*.

- **-?**,**--help**

  Display help message and exit.

## EXIT STATUS

In case of success, an exit value of 0 is returned. Otherwise, 1 is returned.

## SEE ALSO

[**sssd**(8)](/man/sssd/8.md), [**sssd.conf**(5)](/man/sssd.conf/5.md), [**sssd-ldap**(5)](/man/sssd-ldap/5.md), [**sssd-krb5**(5)](/man/sssd-krb5/5.md), [**sssd-simple**(5)](/man/sssd-simple/5.md), [**sssd-ipa**(5)](/man/sssd-ipa/5.md), [**sssd-ad**(5)](/man/sssd-ad/5.md), [**sssd-files**(5)](/man/sssd-files/5.md), [**sssd-sudo**(5)](/man/sssd-sudo/5.md), [**sssd-session-recording**(5)](/man/sssd-session-recording/5.md), [**sss\_cache**(8)](/man/sss_cache/8.md), [**sss\_debuglevel**(8)](/man/sss_debuglevel/8.md), [**sss\_obfuscate**(8)](/man/sss_obfuscate/8.md), [**sss\_seed**(8)](/man/sss_seed/8.md), [**sssd\_krb5\_locator\_plugin**(8)](/man/sssd_krb5_locator_plugin/8.md), **sss\_ssh\_authorizedkeys**(8), **sss\_ssh\_knownhostsproxy**(8), [**sssd-ifp**(5)](/man/sssd-ifp/5.md), [**pam\_sss**(8)](/man/pam_sss/8.md). [**sss\_rpcidmapd**(5)](/man/sss_rpcidmapd/5.md) [**sssd-systemtap**(5)](/man/sssd-systemtap/5.md)

## AUTHORS

**The SSSD upstream - https://github.com/SSSD/sssd/**