dear all

my question regards a fresh server installation on ubuntu 9.10 server (the "10 min video" btw is so choppy in its playback - if it plays back at all- that a lot of the install was guess work)

i read the ovtied man page

"ovtied  is  called  as  an  SSH  forced  command for tied accounts.  It
       presents "roll-n-scroll" users with an access/verify code prompt.  Pre‐
       cautions are taken to prevent users from accessing the underlying Linux
       shell."

first - what is a "tied account" and how do i create it ?

second

when i

ssh openvista@xxx.xxx.xxx.xxx

i was asked for a password; it was not documented as far as i could search, so i set one with "passwd openvista".

then

ssh openvista@xxx.xxx.xxx.xxx

gets me a bash in home directory openvista;

I was under the impression that it would call /usr/bin/ovtied --open as specifieid in ~/.ssh/authorized_keys

which would have been the desired behavior;

so what do i have to do to ensure roll and scroll users get only into openvista and cannot log into a bash instance ?

My goal is to create an environment exactly as ovtied states it:

user ssh's to the server, gets access/verify code screen, does whatever he/she ahs to do without being able to spawn another terminal or similar and upon halting the llogin into openvista the ssh session is automatically closed;

thanks for your help;