Arch Linux

Lockheed

Member

Registered: 2010-03-16

Posts: 1,542

[solved] Problem setting up a dedicated ssh proxy user

I created a user which should only be able to create a ssh SOCKS tunel, with no shell access:

username: proxy
User ID: 1000 (or should it be 500?)
shell: /bin/cat
password: xxx
group: users

The problem is that when I try to ssh to it by

ssh proxy@ip -vvv

or set up a tunnel

ssh proxy@ip -D 9999 -vvv

I get asked for the password and when I give it, I get:

...
debug2: we did not send a packet, disable method
debug3: authmethod_lookup password
debug3: remaining preferred: ,password
debug3: authmethod_is_enabled password
debug1: Next authentication method: password
proxy@ip's password: 
debug3: packet_send2: adding 64 (len 58 padlen 6 extra_pad 64)
debug2: we sent a password packet, wait for reply
debug1: Authentications that can continue: publickey,password
Permission denied, please try again.

I am positive the password given is correct.

Last edited by Lockheed (2014-06-20 10:05:15)

samiam

Banned

From: EAX

Registered: 2010-08-20

Posts: 58

Re: [solved] Problem setting up a dedicated ssh proxy user

Add /bin/cat to /etc/shells

Lockheed

Member

Registered: 2010-03-16

Posts: 1,542

Re: [solved] Problem setting up a dedicated ssh proxy user

Excellent. Many thanks!