Mac na maimaita neman kalmar sirri ta VPN: sarkar maɓalli ko asusu?
Mac na iya neman kalmar sirrin sarkar maɓallin shiga, kalmar sirrin mai gudanarwa ko asusun VPN kansa. Karanta wane ne ya mallaki tattaunawar, sannan ka gyara ajiyar da ta dace.
Kuna buɗe Mac, buɗe abokin ciniki na VPN, sai wani takardar kalmar sirri ya bayyana kafin tunnel ɗin ya fara. Kuna rubuta kalmar sirrin ƙofa, kuma ko dai an ƙi ta ko takardar ta dawo bayan ɗan lokaci. Sannan tana sake tambaya bayan farkawa daga bacci, fita daga asusu ko sabuntawar abokin ciniki. Wannan takarda ba kasafai ita ce uwar garken VPN da ke neman bayanan shiga ba; yawanci macOS na neman izini don karanta, buɗe ko canza rikodin gida, kuma kalmar sirrin ta mai wannan rikodin ce, ba asusun VPN ɗinka ba.
Daidaita takardar da ainihin wanda ke bayanta
Umarni huɗu suna kama da juna, kuma ɗaya ne kawai ya shafi ƙofar. Kalmomin, aikin da ke neman izini da abin da aka ambata a ƙasa suna gaya maka wanne ka fuskanta.
| What the sheet says | Whose password it wants | What it does not do |
|---|---|---|
| Enter the password for the login keychain | The local keychain password, normally your Mac login password | It does not authenticate you to the VPN server |
| An app wants to use confidential information stored in your keychain | Approval for that app to retrieve one item | It does not grant privileges at the gateway |
| macOS wants to make changes, and asks for administrator authorization | An admin account on this Mac, for the named setting | It does not change the VPN account password |
| The client itself asks for a username and password to connect | The remote account, certificate or profile credential | It does not unlock anything local |
Tattaunawa game da izinin gida ba ta tabbatar da komai game da uwar garken. Ƙin ƙofar yana bayyana cikin abokin ciniki da rubutun kuskuren mai siyarwa, ba a matsayin takardar tsarin da ke ba da shawarar buɗe sarkar maɓalli ba. Akasin haka ma ya zama ruwan dare: rubuta kalmar sirrin ƙofa a cikin takardar sarkar maɓalli yana barin rikodin a kulle kuma yana ƙara yunƙurin da ya gaza.
Tattaunawar tana ambaton mai shi, ajiya da aiki
Umarnin sarkar maɓalli sun shafi dawowa da bayanai, ba tabbatar da kai ga wani abu na nesa ba. Bayanin Apple game da tattaunawar buƙata ɗan ƙunci ne: Bar sau ɗaya, Bar koyaushe da Ƙi suna sarrafa ko wannan manhajar na iya karanta abin da aka ajiye. Babu ɗaya daga cikin ukun da ke ba da wata dama a ƙofar ko canza abin da uwar garken ke tunani game da kalmar sirrinka.
Lokacin da mai buƙata abokin ciniki ne da aka sabunta yanzu, ana sa ran sake amincewa: sabon sigar bai dace da jerin sarrafa izinin abin ba, don haka macOS na sake tambaya. Amsa Bar sau ɗaya yayin da kake bincike. Bar koyaushe izini ne na dindindin ga wannan manhajar kuma amsar da ba ta dace ba ga wani aikin taimako da ba ka tsammani; ƙi ka duba mai siyarwa idan fayil ɗin ba shine abokin cinikin da ka shigar ba.
Umarnin da ke neman izinin mai gudanarwa wani nau'i na uku ne. Yana ambaton saitin tsarin ko ajiyar da ake karewa da ake canzawa, kuma bayanan da yake so asusun mai gudanarwa ne a wannan Mac. Ba kowane abu na sirri na sarkar maɓalli yake buƙatar haka ba; waɗanda ke bayan tsarin cibiyar sadarwa yawanci suna buƙata, domin tsarin na tsarin ne, ba na zaman shigarka ba.
Inda kalmar sirrin VPN za ta iya zama a Mac
Sarkar maɓalli ɗaya ce daga cikin ajiyar da za a iya amfani da ita, ba ma'anar ajiya ba. Tsarin VPN da aka gina a Saitin Tsarin yana riƙe bayanan shigarsa tare da tsarin cibiyar sadarwa, a matsayin saitin tsarin da ake sarrafawa. Abokin ciniki na ɓangare na uku yawanci yana riƙe wani abu a cikin sarkar maɓallin shigarka: kalmar sirri ta gama-gari da aka mallake ta da sunan sabis, ko kalmar sirri ta intanet da aka mallake ta da uwar garken, ka'ida da asusu. Yawancin sabbin manhajoji suna amfani da sarkar maɓallin kariya ta bayanai maimakon haka, wadda abubuwanta ba sa bayyana a Damar Sarkar Maɓalli.
Mutane suna neman sunan VPN a Damar Sarkar Maɓalli, ba su sami komai ba, kuma suna tsammanin ba a ajiye kalmar sirrin ba. Bayanin Apple TN3137 ya ce akwai fiye da ɗaya aiwatar da sarkar maɓalli; rashin kasancewa cikin wannan jeri al'ada ce, ba hujjar lalacewar abu ba.
Nau'in rikodi ma ba sa musanya. Kalmar sirrin asusu, jimlar sirrin maɓalli na sirri, takardar shaida ta abokin ciniki da sirrin IPsec da aka raba suna gazawa daban kuma ana gyara su a wurare daban; sake rubuta kalmar sirrin da aka ajiye ba ya amfani ga takardar shaidar da aka ƙi. Idan Mac ɗin yana cikin gudanarwa, bayanin martaba wani mai shi ne: kayan VPN na iya ɗaukar bayanan shiga kuma ya sake amfani da su yayin sabuntawa, don haka goge abu na gida na ɗan lokaci ne har sai mai gudanarwa ya canza shi.
Lokacin da kalmar sirrin shiga da ta sarkar maɓalli suka rabu
Sarkar maɓallin shiga yawanci tana amfani da kalmar sirrin shigarka ta Mac, shi ya sa biyun za su iya rabuwa. Mai gudanarwa da ya sake saita kalmar sirrinka daga wani asusu, tsarin dawowa ko canjin jagorar na iya barin sarkar maɓallin a kulle kan tsohuwar ƙima, sannan macOS na neman kalmar sirrin da ba ka saita yanzu ba.
A lokacin shiga za ka iya ganin gargaɗi cewa tsarin bai iya buɗe sarkar maɓallin ba. Sabunta ta na buƙatar tsohuwar kalmar sirri, wanda ke da kyau idan ka tuna da ita kuma mara amfani idan ba ka tuna. Gyara biyu na gaskiya su ne Damar Sarkar Maɓalli, Gyara, Canza Kalmar Sirri don Sarkar Maɓalli "login", ko sabuwar sarkar maɓallin shiga da aka sake shigar da bayanan da ake buƙata. Zaɓi na biyu yana lalata abubuwan da aka ajiye.
Kada ka sake saita dukan sarkar maɓalli saboda VPN ɗaya ya ƙi tsohon bayani: hakan yana kawar da asusun da ba su da alaƙa kuma har yanzu ba ya gane abin.
Umarni ɗaya yana warware tambayar gida da nesa. Tambayi sarkar maɓalli kai tsaye game da abin:
security find-internet-password -s vpn.example.com -a [email protected] -g
security find-generic-password -s "Client Name" -a [email protected] -gYi amfani da uwar garken da asusu daga saitunan abokin cinikinka. Idan wannan takardar amincewa ta bayyana lokacin da kai da kanka ka tambayi sarkar maɓalli, umarnin na gida ne kuma uwar garken mai kallo ne. Idan babu irin wannan abu, abokin cinikin ba ya ajiye kalmar sirri a inda ka zata. Alamar -g tana buga sirrin a tashar, don haka guje wa raba allo.
Sabunta rikodin da abokin ciniki ke karantawa da gaske
Idan an canza asusu a ƙofar, canza shi a can da farko, sannan sabunta rikodin da aka ajiye ta hanyar saitunan abokin ciniki. Gyara abin sarkar maɓalli da hannu ba abin dogaro ba ne: abokin ciniki na iya karanta wani nau'i na sabis da asusu, kuma bayanin martaba da ake sarrafawa zai rubuta nasa a kan gyaranka.
Don abin da ake zaton ya tsufa, daidaita sabis, asusu da ka'ida kafin ka goge komai:
security delete-generic-password -s "Client Name" -a [email protected]Goge abin da yake da suna kama da shi daga wata hanyar sadarwa cuta ce ta gama-gari da kanka ka haddasa. Cirewa na gida ne kawai: ba ya soke zama a ƙofar, ba ya kwance takardar shaidar na'ura kuma ba ya canza kalmar sirrin asusun.
Tabbatar gyaran ya tsaya bayan sake kunnawa
Haɗa, farka daga bacci, fita ka sake shiga, sannan sake kunnawa sau ɗaya. Tsari mai tsabta ba tare da takarda ba da matsayin abokin ciniki da ke ambaton asusun da ake tsammani su ne kawai hujar da za a yarda da ita. Inda umarnin ya dawo yana gaya maka wace daraja ka rasa: bayan sabuntawa amincewa ce, bayan canjin cibiyar sadarwa umarnin abokin ciniki kansa, bayan sake kunnawa bayanin martaba da ke sake amfani da yanayi.
Duba abokin ciniki don saitin tuna kalmar sirri ko tambaya koyaushe kafin ka sake taɓa sarkar maɓalli. Wasu tsare-tsare, musamman IKEv2 da tabbatar da kowane mai amfani, suna tambaya bisa tsari a kowace haɗi; gyaran sarkar maɓalli ba zai taimaka ba.
Rubuta wane abu ka canza, wace ajiya ta mallake shi kuma wane asusu ya kasance nasa, domin umarni na gaba ya sami wuri cikin daƙiƙa. Shafin Apple Buƙatun damar sarkar maɓalli shine jagora kan abin da waɗannan maɓallan uku ke ba da izini.