I am trying to configure a server that users will log into. Users will use this server as a box to jump into other servers via ssh. From jump server to others will use SSH key based authentication. The users are not allowed to login directly to the other servers. Hence, they need to go from the jump server to the others. The user accounts are locked "usermod -L username" on all other servers.
I have ran into a problem where these users also need to be able to use "sudo" on the other servers. The current problem is that when users are on one of the other servers and try to use sudo they get an error when entering the password "sorry, try again", even though the password is correct. This makes sense because I have locked the user account, preventing direct SSH login. The users are in the sudoers file.
Does anyone know how I could setup the other servers so they would allow the users to SSH only via key based from the jump server and allow the users to use sudo on the other servers(non-jump).
Any help would be greatly appreciated and thanks for your time.