So this is more of a reverse-engineering question.
We have this machine at work, where anyone can login using ssh. ssh johndoe@gateway01
. However! Once logged in, the user the person is logged in as is no longer johndoe
but an account common for all the users, called daq
.
If I do cd ~johndoe
, it just redirects me to ~daq
.
And more interestingly, if I do ssh daq@gateway01
, I get:
This account is currently not available.
Connection to gateway01 closed.
My question is how such a setup could possibly be achieved?
This works for every single user that is present in a list of users somewhere on the machine. This list is in a file called gw_users
.
I noticed that in the same folder, there are some more files:
gw_passwd
gw_shadow
gw_group