User ONLY for ssh tunneling???

cazort · Posted: Thu Oct 21, 2004 6:10 pm Post subject: User ONLY for ssh tunneling???

I want to create a user that can login via ssh to tunnel an ODBC connection to mysql over the ssh connection. I've got this part of it working. The problem is, I don't want the user to have the ability to do anything else on my system--not access any port other than MySQL's ODBC, not read files in the filesystem, and definitely not execute commands.

How can I do this? I have been poking with this and reading man pages and webpages for quite some time and can't get a good straight answer.[/b]

codergeek42 · Posted: Thu Oct 21, 2004 6:11 pm Post subject:

Make their shell /bin/false maybe?
_________________
~~ Peter: Programmer, Mathematician, STEM & Free Software Advocate, Enlightened Agent, Transhumanist, Fedora contributor
Who am I? :: EFF & FSF