SSS_SSH_KNOWNHOSTSPR(1)

💖 SSS_SSH_KNOWNHOSTSPR 💖

okay bestie, welcome to sss_ssh_knownhostsproxy(1) — yes that's the manual name, and yes it's a mouthful, we're getting through it together 🫶

---

✨ NAME ✨

sss_ssh_knownhostsproxy — literally just here to get you your OpenSSH host keys, no cap 🔑

---

🌸 SYNOPSIS 🌸

sss_ssh_knownhostsproxy [options] HOST [PROXY_COMMAND]

---

🦋 DESCRIPTION 🦋

so. sss_ssh_knownhostsproxy goes out and acquires SSH host public keys for the host HOST 👑 it then stores them in a custom OpenSSH known_hosts file — that file lives at /var/lib/sss/pubconf/known_hosts, and if you wanna know more about the format, peek the “SSH_KNOWN_HOSTS FILE FORMAT” section of sshd(8), iykyk. then it establishes the connection to the host. iconic behavior, honestly 💅

if PROXY_COMMAND is specified, it's used to create the connection to the host instead of opening a socket. yeah. that's the whole vibe. ✨

now, here's the slay part: ssh(1) can be configured to use sss_ssh_knownhostsproxy for host key authentication by using these directives in your ssh(1) configuration:

ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h
GlobalKnownHostsFile /var/lib/sss/pubconf/known_hosts

copy them exactly, don't freestyle, fr fr 🙈

---

🎀 OPTIONS 🎀

• -p, --port PORT — use port PORT to connect to the host. by default, port 22 is used. the default is Right There, don't touch it 🌈
• -d, --domain DOMAIN — search for host public keys in the SSSD domain DOMAIN. main character domain energy 💜
• -k, --pubkey — print the host ssh public keys for host HOST. just print them. no connecting, just vibes 🍓
• -?, --help — display the help message and exit. the "help me help you" option 😭

---

💀 EXIT STATUS 💀

in case of success, an exit value of 0 is returned. otherwise, 1 is returned. that's it. zero or one. no in-between, periodt ✨

---

🔥 SEE ALSO 🔥

sssd(8), sssd.conf(5), sssd-ldap(5), sssd-ldap-attributes(5), sssd-krb5(5), sssd-simple(5), sssd-ipa(5), sssd-ad(5), sssd-files(5), sssd-sudo(5), sssd-session-recording(5), sss_cache(8), sss_debuglevel(8), sss_obfuscate(8), sss_seed(8), sssd_krb5_locator_plugin(8), sss_ssh_authorizedkeys(8), sss_ssh_knownhostsproxy(8), sssd-ifp(5), pam_sss(8). sss_rpcidmapd(5) sssd-systemtap(5) — yes, the whole friend group came out, we love a full squad 🧚

---

👑 AUTHORS 👑

The SSSD upstream - https://github.com/SSSD/sssd/ 💖

---

and that's the page, bestie!! this one's from the SSSD manual pages, version dated 07/08/2026, filed under SSS_SSH_KNOWNHOSTSPR(1) — go forth and auth those host keys, you got this 💅✨🌸