GSSPROXY(8)

✨ GSSPROXY(8) β€” gssproxy, the GssProxy Daemon ✨

okay bestie, buckle up, we're looking at a page from the GssProxy Manual pages and it's genuinely so good πŸ’–

🌸 NAME 🌸

gssproxy β€” the GssProxy Daemon, aka the little guy holding all your GSSAPI credentials together πŸ’…


πŸ¦‹ SYNOPSIS πŸ¦‹

gssproxy [options]

like, that's it. that's the whole vibe. no cap.


πŸ‘‘ DESCRIPTION πŸ‘‘

so gssproxy hands you a daemon whose entire job is managing access to GSSAPI credentials. it's giving gatekeeper, but in a helpful way 🫢

and here's the thing β€” gssproxy is actually a two-piece set (iconic duo behavior, fr fr):

both. at the same time. matching outfits. πŸ’œ


πŸ’… OPTIONS πŸ’…

this is the main character section, let's go:

  • -D, --daemon β€” become a daemon after starting up. like, it does the work first and then commits to the daemon lifestyle ✨
  • -c, --config β€” point at a specific config file to use as the main config file (it gets read before the rest of the config directory). the default is to use /etc/gssproxy/gssproxy.conf. want the tea on config file syntax and options? consult the gssproxy.conf(5) manual page πŸŽ€
  • -C, --configdir β€” pick a non-default config dir. files named like "##-foo.conf" (so: starting with two digits and a dash, and ending in .conf) get read in numeric order from this directory, plus the config file itself. the default is /etc/gssproxy. and again, for the deets on config file syntax and options, go read the gssproxy.conf(5) manual page πŸ’–
  • -d, --debug β€” turn on debugging. literally identical to --debug-level=1 πŸ’€
  • --debug-level= β€” turn on debugging at whatever level you specify:
    • 0 = no logging at all (silence, a vibe)
    • 1 = basic debug logging
    • 2 = more verbosity, including more detailed credential verification πŸ”
    • 3 and above = KRB5_TRACE output gets logged. but if KRB5_TRACE was already set in the execution environment, then the trace output goes to its value instead. sneaky, ik
  • -i, --interactive β€” run in the foreground, do not become a daemon. it's staying right here with you πŸ™ˆ
  • -u, --userproxy β€” run gssproxy in userproxy mode. this mode ignores configuration files entirely and listens on a socket at $XDG_RUNTIME_DIR/gssproxy/default.sock instead. want the full lore on how this mode behaves? it's in the project documentation πŸ¦‹
  • -s, --socket β€” set a custom default socket name. this socket gets used by all sections that don't define an explicit socket of their own πŸ”₯
  • --syslog-status β€” enable extra logging to syslog ✨
  • --version β€” print the version number and exit. bye πŸ‘‹

🌈 SIGNALS 🌈

  • SIGTERM / SIGINT β€” tells GssProxy to gracefully terminate all of its child processes and then shut down. calm, polite, no mess 🫢
  • SIGHUP β€” request a reload of all configuration for gssproxy. and bestie, listen: if there's an error in the config files, the existing configuration does not get replaced. but if there's a problem applying the new configuration, gssproxy will exit. so like, be careful 😭

πŸŽ€ SEE ALSO πŸŽ€

gssproxy.conf(5) and gssproxy-mech(8). go read your siblings, iykyk πŸ’œ


⭐ AUTHORS ⭐

GSS-Proxy β€” https://github.com/gssapi/gssproxy


periodt. that's the whole page, no notes πŸ’…

and a cute little sign-off for the end: this one came from GSS Proxy, dated 11/01/2026, and it's filed right under GSSPROXY(8) 🌸✨

πŸ“¦ where this page comes from