I am writing an application for smartphones to provide very limited SSH usage. The user cannot perform arbitrary actions when logged in. They can run a specific script(s) only.
For various reasons it is not possible to implement passwordless login so the password must be provided from the smartphone for login. However I have to questions about the security flaws/problems with what I'm doing.
I don't want to give the users (in house employees) the SSH password directly, so they can't SSH from their homes and do what they like on the server. So my plan is for the user to enter their own password and use this as a key to store on the smartphone the (AES) encrypted SSH password. Only me or a server admin can enter this password on their phones, after downloading the application. This way they cannot login from unauthorized devices. Is this a good idea? I can't think of any security flwas in this.
I am thinking about giving all smartphone users one user account on the server, so they all log in to the same user by SSH. Is this a bad idea too?