Multiple servers, restricting user commands and LDAP

[Damien Miller]

Finlay Dobbie wrote:

> Basically, I was wondering if anybody had any input on this situation,
> what they'd like to see from any OpenSSH/LDAP integration, and that
> kind of thing. It seems that the command= shouldn't necessarily only
> be coupled to keys, no?

If you want users to be forced to use a specific command, rather than
just forcing a command on a particular key, then you can just make the
command the user's login shell.

-d