I'm running a Debian Linux. I'd like to have a user account that is able to connect via SSH for TCP-forwarding only, without a command prompt.
e.g the following would work (from a remote computer):
ssh -D1234 user@myhost
but no command prompt would appear.
Using a shell like /bin/false or /sbin/nologin is too restrictive as it doesn't even allow the user to log in. A shell that only allows the "exit" or Ctrl+D commands would do the job.
I know that something similar is possible to allow only SFTP, but I can't find the equivalent for TCP forwarding.