SSH-LDAP-HELPER(8)

💅 SSH-LDAP-HELPER(8) 💅

okay so bestie, welcome to the ssh-ldap-helper corner of the System Manager's Manual — this is the sshd helper program for ldap support, and yes she's a whole vibe ✨

---

🦋 SYNOPSIS 🦋

ssh-ldap-helper [-devw] [-f file] [-s user]

like, that's the whole invocation, no cap 🎀

---

🌸 DESCRIPTION 🌸

so ssh-ldap-helper is the little helper that sshd(1) calls up when it needs to access keys provided by an LDAP. she's the backstage bestie making it all happen 🔥

she is disabled by default — no cap, she's off until you invite her — and can only be enabled in the sshd configuration file /etc/ssh/sshd_config by setting AuthorizedKeysCommand to "/usr/libexec/ssh/ssh/ssh-ldap-wrapper". that's the one and only way in, iykyk 💅

real talk: ssh-ldap-helper is not intended to be invoked by the user, but from sshd(8) via ssh-ldap-wrapper. like she has main character energy but she's a background character — do not @ her directly 🙈

the options are as follows, bestie, and each one is iconic in her own way:

---

✨ OPTIONS ✨

• -d — sets the debug mode; ssh-ldap-helper prints all logs to stderr instead of syslog. straight to your terminal, no filter 💀
• -e — implies -w; ssh-ldap-helper halts if it encounters an unknown item in the ldap.conf file. she's dramatic and she's strict — unknown item = full stop 🛑
• -f — ssh-ldap-helper uses this file as the ldap configuration file instead of /etc/ssh/ldap.conf (default). pick your own config, you're the main character 🎀
• -s — ssh-ldap-helper prints out the user's keys to stdout and exits. keys out, bye ✌️
• -v — implies -d; increases verbosity. more words, more lore 🗣️
• -w — ssh-ldap-helper writes warnings about unknown items in the ldap.conf configuration file. not a halt, just a lil heads-up 🫶

---

🌈 SEE ALSO 🌈

sshd(8), sshd_config(5), ssh-ldap.conf(5),

(yeah the trailing comma is staying, she's quirky like that 💜)

---

🧚 HISTORY 🧚

ssh-ldap-helper first appeared in OpenSSH 5.5 + PKA-LDAP . — a true vintage icon, she's been serving since day one 👑

---

👑 AUTHORS 👑

Jan F. Chadima <jchadima@redhat.com> — thank you for your service bestie 🫶

---

and that's the whole page, mwah 💋 this cutie dropped as part of the Debian manual situation, dated April 29, 2010, and she's filed under SSH-LDAP-HELPER(8) — periodt. 💖✨🎀