Re: logging in with tunnels but no shell

From: Kyler Laird (Kyler_at_news.Lairds.org)
Date: 10/24/03


Date: Fri, 24 Oct 2003 14:22:26 GMT

john@curioussymbols.com (jdpipe) writes:

>I'm writing a distributed application at the moment that uses SSH as
>its method of transferring data from computer to computer. I want to
>create a private key that remote computers can use to log in to the
>central server. But I don't want these keys to provide access to a
>shell prompt. I want to provide a tunnel to MySQL, a tunnel to a
>webserver, and perhaps SCP. Can I specify those things as part of the
>authorized_keys section?

You can specify
        command="cat"
there, but I don't know of a way to specify a restriction on tunnels.

(If you decide to support scp, you'll want to allow a more exotic
program than "cat." Those have been discussed here already.)

--kyler



Relevant Pages

  • logging in with tunnels but no shell
    ... I'm writing a distributed application at the moment that uses SSH as ... its method of transferring data from computer to computer. ... create a private key that remote computers can use to log in to the ... I want to provide a tunnel to MySQL, ...
    (comp.security.ssh)
  • Re: How to lock the use of assembly by other assemblies.
    ... > can also specify a CryptoAPI keycontainer name in your source code ... > You can use the private key associated with any issued/installed X509 Certificate ... > by specifying the corresponding keycontainer for the cert. ...
    (microsoft.public.dotnet.security)
  • RE: Cryptography Help Needed
    ... You specify AT_KEYEXCHANGE ... in dwKeySpec. ... The opened CONTAINER's appropriate private key will be used to ... sign the hash ...
    (microsoft.public.platformsdk.security)
  • Re: "public" OpenSSH Tunnel
    ... Jukka Salmi writes: ... >one tunnel, so I can leave this option to 'no' in ssh_config. ... I've not been able to specify it with the client yet. ...
    (comp.security.ssh)
  • Re: public key crypto
    ... > Bill Unruh wrote: ... >>The private key is unique IF you specify that the private key (in RSA) has ...
    (sci.crypt)