[CentOS] Setting up a userID for an SSH tunnel

I need/desire to set up a userID for an SSH tunnel, but not allow said 
user to have a login to the server.

For the user to set up the tunnel with:

ssh -p 1234 -L 8080:192.168.1.4:80 george at gateway.foo.com

Where george would use a password instead of a stored SSH key, could 
george be created with:

useradd  -s /sbin/nologin -c "George" george

passwd george


thanks