ssoosshd config check
Loads the configuration exactly as serve and sign do (the same file search or –config, defaults.yaml, the ldap.schema preset, then the file) and runs the same validation, but reports every problem instead of stopping at the first: settings a start refuses, in every section; keys nothing reads, each with the file it is in and the closest real key; the TLS key pair, the cert_options templates and policies, and the mail templates and relay settings; and the warnings a start logs.
Nothing is contacted: no database, directory, broker, CA key source or identity provider. Local files the configuration names (the TLS pair, ssh_key_file, password files, NATS certificates) are read, as a start reads them. Use ldap probe and the admin diagnostics page for the connections.
–show-sources adds every effective setting and the layer it came from (default, preset or file). Secrets are redacted as on the admin configuration page.
Exit status: 0 when the configuration is valid, warnings included; 1 when it has any error, when –strict is given and a key is unknown, or when the command itself fails.
Synopsis
Section titled “Synopsis”ssoosshd config check [flags] [args]Options
Section titled “Options”| Flag | Type | Default | Description |
|---|---|---|---|
--json |
bool | false |
print the report as JSON |
--show-sources |
bool | false |
list every effective setting and where its value came from |
--strict |
bool | false |
treat unknown keys as errors |
Global options
Section titled “Global options”Inherited from ssoosshd and its parents.
| Flag | Type | Default | Description |
|---|---|---|---|
-c, --config |
string | path to the ssoosshd config file |