In the admin guide, we're supposed to show a script example to be used as ForceCommand to allow only ThinLinc access via SSH. https://www.cendio.com/resources/docs/tag/lockdown.html?highlight=restricting#using-forcecommand The missing piece is #!/bin/bash thinlinc-login -c "${SSH_ORIGINAL_COMMAND}" Note, this information is present in 4.13.0 version of the admin guide.
Should probably have a look how this was overlooked in the conversion.
*** Bug 8120 has been marked as a duplicate of this bug. ***