custom Login shell in /etc/passwd

pypieuvre · 02-16-2006, 06:40 AM

I use the parameter in /etc/passwd for users to login with a normal/custom shell( /bin/bash, /bin/sh, /myShellLikeScript ...)

I know it's possible to use special entries like /bin/false to have an account without the possibilite to login.

Is it possible to be enable login without giving a prompt ? (the idea is that the user could open an ssh session with tunneling) :

Code:

ssh -l 2022:anotherHost:22 myLogin@myHost
Last login: Wed Feb 15 22:50:33 2006 from XXXXXX

No prompt is offered to the user, so that he can make tunnels but not run commands on the current server.

Any ideas ?
Thanks a lot

unSpawn · 02-16-2006, 07:19 AM

On the host to tunnel to prefix the remote users key in authorized_keys with command="/bin/sleep 7200",no-pty. This will keep ssh from assigning a pseudo-tty (AFAIK even if multiple -t's are given) and will execute sleep to prohibit executing other commands.