Hi all,

I want to setup a centos box dedicated to ssh tunneling.

I need to restrict the users so they can't do anything else but tunneling (running shell commands, browsing through the file system, seeing other users).

I see tutorials for ssh restricted to sftp and scp, but nothing for restricting users to tunneling only. Even the rssh does not have any mention of this. If I am misunderstanding how this is working, maybe someone can clarify.

If anyone has done this or has any ideas as to how to do this, please offer some advise or a guide that I can follow.

Thanks,

On the server, set their shell to /usr/bin/true

on the client ssh command line, they have to use an option (I cant remember what it is and my current version of ssh is OOOOOLLLlllddd) that basically doesn't disconnect when true returns 1. It's something along the lines of "dont try and open a shell when you connect"... do a "man ssh" to try and figure out what it is.

Looks like it's "-N Do not execute a remote command.", so

ssh -L LocalPort:HostestPort -N user@server