Solved: Is it possible to switch(su) IAM user when the VM ... - Page 2

rai_kyou · 10-21-2021 05:16 PM

Hello,

I started a VM instance with Debian, and I noticed OS Login can manage SSH access using IAM.

There are two employees in the organization whose accounts are user_a@example.com and user_b@example.com .

When use the following command to connect the instance,

gcloud compute ssh instance_name

and show like this,

user_a_example_com@instance:~$
user_b_example_com@instance:~$

When trying to switch another user, I am asked to enter a password.

I checked /etc/passwd and found that user_a and user_b not exist.

Can someone please explain in detail the password management for IAM users.

glen_yu

As I mentioned, I would try it when the user has the OSLoginAdmin role as that role has sudo access. If you can't sudo -i to root and then su - user_b_example_com then you should be safe.

The users won't have a password so there should be no way that I can see that you'd be able to make that switch. And if those users only have OSLogin, then you wouldn't be able to even sudo

Can you even do a finger or id on the other user?

View solution in original post

Is it possible to switch(su) IAM user when the VM instance enable OS Login?