Setting Up A UserID For An SSH Tunnel
I need/desire to set up a userID for an SSH tunnel, but not allow said user to have a login to the server.
For the user to set up the tunnel with:
ssh -p 1234 -L 8080:192.168.1.4:80 george@gateway.foo.com
Where george would use a password instead of a stored SSH key, could george be created with:
useradd -s /sbin/nologin -c “George” george
passwd george
thanks
4 thoughts on - Setting Up A UserID For An SSH Tunnel
I think you are correct that that would create an account that George would not be able to log into.
The user needs to be able to log in to a shell that does nothing interactively. You might be able to set the shell to /usr/bin/cat…
user to have a login to the server. interactively. You might be able to set the shell to /usr/bin/cat…
Better still a force command that discards any attempted command by the user…
Extra points if they attempt a command and “yelling” at them ;)
I’d also use at least a chroot in case they do manage to get interactive access.
Thanks for all the advise. I did some searching and found:
http://askubuntu.com/questions/48129/how-to-create-a-restricted-ssh-user-for-port-forwarding
This looks reasonable enough to give it a try…