Unix Shell/SSH config to allow TCP port forwarding without showing a command prompt

Posted by Raphael K on Server Fault See other posts from Server Fault or by Raphael K
Published on 2013-06-30T16:29:16Z Indexed on 2013/06/30 22:22 UTC
Read the original article Hit count: 208

Filed under:
|
|
|

I'm running a Debian Linux. I'd like to have a user account that is able to connect via SSH for TCP-forwarding only, without a command prompt.

e.g the following would work (from a remote computer):

ssh -D1234 user@myhost

but no command prompt would appear.

Using a shell like /bin/false or /sbin/nologin is too restrictive as it doesn't even allow the user to log in. A shell that only allows the "exit" or Ctrl+D commands would do the job.

I know that something similar is possible to allow only SFTP, but I can't find the equivalent for TCP forwarding.

Thanks

© Server Fault or respective owner

Related posts about linux

Related posts about ssh