Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'd like to create a no-login account on my OS X (10.6.6) laptop at home so that I can establish a reverse SSH tunnel to it from my desktop at work.

My intention is to create cron job (at work) that periodically checks dropbox for a given file. If it is there, it will establish a reverse tunnel to my laptop at home. I will use SSH keys to eliminate the need to enter a password. However, I don't want just anyone to jump on to my machine and have shell access to my laptop.

Is creating a no-login account to work in this way possible? And, is it reasonable means of maintaining a high level of security?

Thanks!

share|improve this question
up vote 1 down vote accepted

In the entry for the key in ~/.ssh/authorized_keys, set the no-pty and/or command options so that no shell can be opened (read may be useful as the command). See the sshd(8) man page for details.

share|improve this answer
    
add no-pty option to ~/.ssh/authorized_keys is enforce on account level. Is there an option to block pty from system level? – Chau Chee Yang Jul 17 '11 at 5:08

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .