Furofil ɗin VPN ba ya shigowa a macOS: fara duba abin da ke ciki

Lokacin da furofil ya shiga cikin sauƙi a wata Mac kuma aka ƙi shi a wata, ba a kai ga hanyar sadarwa ba tukuna, don haka takardun shaida, ƙofofin shiga da kalmomin sirri ba su da wani laifi. Mai sakawa ya tsaya a wani abu da ba zai karɓa ba, kuma yawanci yana rubuta wanne ne. Wannan ya bar furofil ɗin da duk abin da ya ƙirƙire shi a matsayin wuraren da suka dace kawai don aiki, kuma shafe saituna a kan abokin ciniki ya zama hanyar lalata shaida maimakon gyara.

Karanta furofil ɗin maimakon sake saita Mac

Fitar da .mobileconfig ka duba abin da yake ɗauka da gaske kafin ka taɓa abokin ciniki:

plutil -p profile.mobileconfig | head -60

Furofil ɗin VPN a haƙiƙa abubuwa biyu ne masu ayyuka daban-daban: com.apple.vpn.managed yana riƙe da haɗin, com.apple.dnsSettings.managed kuma yana riƙe da saitin mai warware suna. Sakawa na tsayawa a abu na farko da mai sakawa ya ƙi, kuma ƙin ɗin yana shiga cikin tarihin tsarin da sunan wannan abin, don haka tarihin ne zai gaya maka wane sashe za ka buɗe. Ajiye kwafin furofil ɗin ƙarshe da ya shigo da gaske, domin wannan fayil ɗin shine tushen da ake auna bambancin ka da shi.

Abin da mai ƙirƙira ya ƙara a hankali

Apple Configurator 2.15, bugu na 7A23, ya fitar da wannan guntun a cikin abin DNS ɗin sa:

<key>DNS</key>
<dict>
  <key>SupplementalMatchDomainsNoSearch</key>
  <integer>0</integer>
</dict>

A macOS 12.1, furofil ɗin da wannan bugu ya rubuta an ƙi su yayin shigowa. Haɗin da aka yi da Configurator 2.11.1 ya shiga ba tare da wata ƙara ba, domin wancan bugu bai rubuta maɓallin kwata-kwata ba. Cire duk ƙamus ɗin DNS ko kawai maɓallin da ke da matsala, sake ajiye shi, sannan sake gwadawa a wannan injin kafin ka canza wani abu. Yawanci wannan gyara ɗaya ne duk gyaran.

Kayan aikin yana da tarko da ya kamata ka sani kafin ka amince da shi. Bayan an goge maɓallin, ajiye wannan haɗin bai mayar da shi ba, kuma ya sake bayyana ne kawai lokacin da aka ƙirƙiri haɗi daga farko. Ka ɗauki kowane sabon furofil a matsayin abin tuhuma ka duba shi, musamman idan an yi dukan rukunin haɗe-haɗe a zama ɗaya.

Hanyar MDM tana gazawa a wani wuri

Sabis ɗin gudanarwa da ke tura wannan furofil ɗin na iya gazawa a wani wuri: abokin ciniki yana ƙara cewa ba a ƙirƙiri wani sabis ɗin VPN ba kwata-kwata. A cikin lamarin da aka ruwaito, an saita abin don tabbatarwa da takardar shaida amma duk da haka yana buƙatar filin kalmar sirri; cika shi da wani abu na wucin gadi ya bar furofil ɗin ya yi aiki, kuma babu abin da ya taɓa amfani da wannan darajar don tabbatarwa.

Idan ka bi wannan hanya, ajiye wata kalma ta karya ba da wani ainihin bayanan shiga ba, kuma ka kiyaye ainihin sirrin a wajen jikin furofil ɗin. Furofil ɗin da ke ɗauke da kalmar sirri mai aiki ya zama fayil da dole a kiyaye shi kamar maɓalli, kuma wannan babbar matsala ce fiye da gazawar shigowa da ka fara da ita. Yanke shawara wanda ya mallaki wannan abin na wucin gadi kafin a rarraba furofil ɗin, domin kada wani daga baya ya ɗauke shi a matsayin darajar da ta cancanci sauya. Rubuta dalilin da ya sa yake akwai yana ɗaukar layi ɗaya kuma yana hana jayayya bayan wata shida.

Tabbatar furofil ɗin ya sauka da gaske

Shigowa cikin nasara ba sabis mai aiki ba ne, don haka duba a wannan tsari:

profiles show -type configuration
scutil --nc list
scutil --nc start "Your VPN Service"
scutil --nc status "Your VPN Service"
scutil --dns | head -20

Umarni na farko yana lissafin abubuwan da aka saka; na biyu yana faɗin ko akwai sabis ɗin VPN kwata-kwata. Na ƙarshe, wanda aka gudanar bayan haɗawa, yana nuna mai warware suna da tsarin zai yi amfani da shi da gaske. Karanta su a wannan tsari ka tsaya inda sarkar ta karye, domin rashin sabis yana sa duk wata tambaya game da mai warware suna ta zama marar ma’ana. Furofil ɗin na iya kasancewa a lissafta a matsayin an saka amma ba shi da wani abu mai amfani, kuma wannan shi ne ainihin yanayin da wannan jerin aka yi don ya bayyana.

Idan ramin ya tashi alhali shigarwar sabis ɗin ba ta da wani suna mai amfani, an rasa filin sunan da ake nunawa a fitarwa, kuma maganinsa sabon furofil ne ba canza suna a abokin ciniki ba. Idan mai warware suna ya ci gaba da nufar wurin gida, an cire abin DNS ɗin fiye da yadda ka yi niyya.

Ai gudanar da yaɗawa mataki-mataki, Mac ɗaya a lokaci

Saka a kan Mac ɗaya da ake gudanarwa wanda ke da wannan bugu na OS, sannan duba abubuwa uku daban: sabis ɗin ya bayyana, mai warware suna ya canza, kuma buƙatu ɗaya ta ainihi ta ciki ta yi nasara. Bayan duka ukun ne kawai za a faɗaɗa iyaka.

Waɗannan sakamako uku ne daban-daban waɗanda ke gazawa ta hanyoyi uku daban-daban, kuma shi ne ya sa injin gwaji ɗaya ya cancanci waɗannan minti goma. Furofil ɗin da ke shigowa ba furofil ɗin da ke aiki ba ne, kuma injin matakin farko yana kama duka nau’ikan gazawar biyu kafin sauran rundunar su ga ɗaya.