Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Possible Duplicate:
ssh tunneling only access

I'm thinking about using TightVNC's java client to allow customers to access a virtual server. TightVNC supports tunneling the connection using SSH.

To make things more secure, I'd like to have the account used for this to only allow tunneling, but nothing else (ie. no shell). What is required to have tunneling work, but blocking everything else?

share|improve this question

marked as duplicate by Chopper3 Jan 28 '11 at 18:58

This question was marked as an exact duplicate of an existing question.

Indeed, Gilles, you're right. Is there a way to mark it as a duplicate, or should I just delete the question? – Dave Vogt Dec 14 '10 at 14:28

Set account shell to /usr/sbin/nologin

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.