Possible Duplicate:
ssh tunneling only access
I'm thinking about using TightVNC's java client to allow customers to access a virtual server. TightVNC supports tunneling the connection using SSH.
To make things more secure, I'd like to have the account used for this to only allow tunneling, but nothing else (ie. no shell). What is required to have tunneling work, but blocking everything else?
