My network layout is something like this:
Now Alice has access to SSH gateway (just gateway from now on) with:
and the authorized keys file on the gateway looks like this
#/home/Alice/.ssh/authorized_keys command="ssh -t alice@web" ssh-rsa ABCD...E== alice@somehost
so when Alice tries to connect to the Gateway with her private key, she actually gets connected to the Web server (the gateway pc can make a connection to the web server with a passwordless private key, so that stays transparent).
How can I set this up so that Alice will be able to scp things to web server too?
I know this makes a separate connection, but is there any way for this to work as a normal ssh so that even something like