sss_ssh_knownhostsproxy(1) [debian man page]

SSS_SSH_KNOWNHOSTSPR(1) 					 SSSD Manual pages					   SSS_SSH_KNOWNHOSTSPR(1)

NAME

       sss_ssh_knownhostsproxy - get OpenSSH host keys

SYNOPSIS

       sss_ssh_knownhostsproxy [options] HOST [PROXY_COMMAND]

DESCRIPTION

       sss_ssh_knownhostsproxy acquires SSH host public keys for host HOST, stores them in a custom OpenSSH known_hosts file (see the
       "SSH_KNOWN_HOSTS FILE FORMAT" section of sshd(8) for more information) /var/lib/sss/pubconf/known_hosts and estabilishes connection to the
       host.

       If PROXY_COMMAND is specified, it is used to create the connection to the host instead of opening a socket.

       ssh(1) can be configured to use sss_ssh_knownhostsproxy for host key authentication by using the following directives for ssh(1)
       configuration:

	   ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h
	   GlobalKnownHostsFile2 /var/lib/sss/pubconf/known_hosts

	This is an experimental feature, please use http://fedorahosted.org/sssd to report any issues.

OPTIONS

       -p,--port PORT
	   Use port PORT to connect to the host. By default, port 22 is used.

       -d,--domain DOMAIN
	   Search for host public keys in SSSD domain DOMAIN.

       -h,--help
	   Display help message and exit.

SEE ALSO

       ssh(8), ssh_config(5), sss_ssh_authorizedkeys(1).

AUTHORS

       The SSSD upstream - http://fedorahosted.org/sssd

SSSD
								    03/04/2013						   SSS_SSH_KNOWNHOSTSPR(1)

SSS_OBFUSCATE(8)						 SSSD Manual pages						  SSS_OBFUSCATE(8)

NAME

       sss_obfuscate - obfuscate a clear text password

SYNOPSIS

       sss_obfuscate [options] [PASSWORD]

DESCRIPTION

       sss_obfuscate converts a given password into human-unreadable format and places it into appropriate domain section of the SSSD config file.

       The cleartext password is read from standard input or entered interactively. The obfuscated password is put into "ldap_default_authtok"
       parameter of a given SSSD domain and the "ldap_default_authtok_type" parameter is set to "obfuscated_password". Refer to sssd-ldap(5) for
       more details on these parameters.

       Please note that obfuscating the password provides no real security benefit as it is still possible for an attacker to reverse-engineer the
       password back. Using better authentication mechanisms such as client side certificates or GSSAPI is strongly advised.

OPTIONS

       -h,--help
	   Display help message and exit.

       -s,--stdin
	   The password to obfuscate will be read from standard input.

       -d,--domain DOMAIN
	   The SSSD domain to use the password in. The default name is "default".

       -f,--file FILE
	   Read the config file specified by the positional parameter.

	   Default: /etc/sssd/sssd.conf

SEE ALSO

       sssd(8), sssd.conf(5), sssd-ldap(5), sssd-krb5(5), sssd-simple(5), sssd-ipa(5), sssd-ad(5), sssd-sudo(5),sss_cache(8), sss_debuglevel(8),
       sss_groupadd(8), sss_groupdel(8), sss_groupshow(8), sss_groupmod(8), sss_useradd(8), sss_userdel(8), sss_usermod(8), sss_obfuscate(8),
       sss_seed(8), sssd_krb5_locator_plugin(8), sss_ssh_authorizedkeys(8), sss_ssh_knownhostsproxy(8),pam_sss(8).

AUTHORS

       The SSSD upstream - http://fedorahosted.org/sssd

SSSD
								    06/17/2014							  SSS_OBFUSCATE(8)