I've created a user on my Ubuntu machine so that some people can log in and set up SSH tunnels and also so they can download some files from the system.
I don't want them to have shell access at all. Even if they had it, they wouldn't know what to do with it.
I can set their PuTTY clients not to request a shell, however if I do this, they enter their password and nothing comes up. They have absolutely no indication whether the login was successful or not unless they start trying to use the tunnels.
Also, this is disabling the shell on the client side rather than the server side, which I'm not too fond of.
What's the best way to maintain SSH tunneling and file downloading capacity while preventing the user from seeing a shell, but still giving them some welcome message upon login?
Can I just write a bash script, for example, that
echos out "Welcome", and set that as their shell?