I have a RHEL 7 server that we are using as a jumpbox to authenticate to all servers. Typically users will login to jumpserver(rhel 7) from local machine and then login to their respective virtual machines but lately users are storing data on their directory in jumpserver which is very small vm and we don't what users to store any data in-fact i want restrict users to just use it as jumpserver by disabling all others permissions to run any command.
flow: localmachine(open-ldap auth) --> jumpserver-rhel 7(ssh-only) ---> virtual machine
can someone shed some light on how to restrict domain/ldap and linux users to only ssh and do nothing apart from jump to their virtual machine.
Env: everything is rhel 7 based.