I-Access Server ayinaki iskripthi ye-post_auth oyihlele kabusha kudiski

I-mac.py ehlelwe kabusha engashintshi lutho iwuphawu lokuqala olujwayelekile. Ifayela elikudiski akulona eliqhutshwa yi-Access Server; insizakalo yokuqinisekisa ilayisha iskripthi kusuka kumgoli wemininingwane wokucushwa wesiphakamiso, futhi yileyo khophi egciniwe enqumayo ngokungena. Kuze kube yilapho inani eligciniwe lishintshwa, zonke izivivinyo zikhombisa kuphela ukuthi iskripthi endala isasebenza.

Izimo ezintathu zinquma umsebenzi: ukuthi inani lake lafakwa kumgoli wokucushwa, ukuthi insizakalo yayalelwa ukulilayisha futhi, nokuthi ikhodi oyishintshile isebenza ngempela kukho konke ukuxhumana. Ngakunye kunophawu oluhlukile, futhi ukulungisa okungalungile kumosha isikhathi sokunakekela.

Ifayela lingumthombo, hhayi ikhophi esebenzayo

I-Access Server igcina iskripthi se-post-auth ngaphansi kokhiye auth.module.post_auth_script. Ukuhlela ifayela kuvuselela ikhophi yakho yokusebenza kuphela. I-daemon ifunda inani eligciniwe, ngakho ukushintsha kuhlala kungabonakali kuze kube yilapho ususa umugqa omdala futhi ubeka ifayela elisha endaweni yawo. Lelo nani eligciniwe yilona kuphela ikhophi ebhekwa insizakalo yokuqinisekisa.

Yifunde ngaphambi kokuyishintsha. Uma isivele ihambisana nefayela oyihlelile, inkinga ayikho ekugcineni futhi dlulela embuzweni wobubanzi. Uma ikhombisa inguqulo endala, ushintsho aluzange lufike ensizakalweni.

./sacli -k auth.module.post_auth_script ConfigGet

Shintsha ikhophi egciniwe, bese uyisebenzisa

Ukususa ngaphambi kokubhala akukona ukuhlobisa. I-ConfigPut kanye ne---value_file ishintsha inani esigabeni esisodwa, futhi ukwenza i-ConfigDel kuqala kwenza kungenzeki ukushiya umugqa wakudala noma owonakele. Gcina ikhophi yeskripthi esebenzayo ngaphandle kwefolda yezkripthi ngaphambi kokuqala.

./sacli -k auth.module.post_auth_script ConfigDel
# store the file, then apply it
./sacli -k auth.module.post_auth_script --value_file=/root/post_auth.py ConfigPut
./sacli start

I-sacli start isebenzisa ukucushwa okushintshiwe ezinsizakalweni zangaphakathi, futhi yikho okwenza iskripthi esisha siqale ukusebenza. Lokhu akufani nokuqalisa kabusha umshini wonke noma i-daemon, futhi akufanele kushintshwe ngakho ngaphandle uma ushintsho lwakho lukudinga.

Sebenzisa indlela ephelele yefayela lenani futhi uqinisekise ukuthi i-root iyafunda. Indlela exazululwa kusuka kugobolondo lakho kodwa hhayi kusuka ku-akhawunti yensizakalo iletha inani eligciniwe elibonakala lilungile ku-ConfigGet futhi lihluleka ekungeneni kokuqala. Hlola umphumela ogciniwe futhi ngemuva kwe-sacli start, hhayi ngaphambi.

Ububanzi bemoduli noma ukuxhumana ngakunye: umbuzo kufanele ube kuphi

I-Python yenza izitatimende zezinga lemoduli kanye kuphela, lapho iskripthi ilayishwa. Ngakho umbuzo womgoli wemininingwane obhalwe phezulu kwefayela ufunda ithebula ngesikhathi sokulayisha futhi ugcina leyo mpendulo kukho konke ukuxhumana okulandelayo. Lesi yisizathu sesibili sokuthi ushintsho lubonakale lungashintshi lutho: ikhodi iyasebenza, kodwa hhayi ngesikhathi osilindele.

Beka umbuzo ngaphakathi kwesiphathi se-post_auth ukuze sisebenze kukho konke ukuqinisekisa. Gcina isiginesha ebhaliwe, lungisa umphumela wokuqinisekisa otholwa yisiphathi, futhi ubuyisele leyo nto efanayo esikhundleni senombolo engenalutho.

Gcina nokuphathwa kokuxhumana ngaphakathi kwesiphathi. Ukuxhumana okuvulwe ngesikhathi sokungenisa kungavalwa isiphakamiso ngaphambi kokungena komsebenzisi wokuqala, futhi iphutha elivelayo libonakala njengobufakazi obunqatshiwe hhayi njengeskripthi esiphukile.

Izindlela ezimbili zokunqaba, umnikazi oyedwa

Uma isinqumo kungumbuzo wasekhaya, umphumela ungumnikazi wesiphathi se-Python. Uma kuwukuhlola kwe-HTTP kwangaphandle, vumela isimo sokuphuma somyalo sithwale impendulo: isembozo esiphuma ngekhodi engeyona uziro sinqaba ukungena, futhi isimo somyalo wokugcina siba yisimo seskripthi ngaphandle kwe-exit ecacile.

Gcina imfihlo ngaphandle kohlu lwezinqubo. Ifayela elifundwa i-root noma inani lemvelo elidluliswa yinsizakalo liphephile kunengxoxo esingafundwa yinoma yimuphi umsebenzisi wendawo kusuka ku-ps. Bika iphuzu lokugcina kusiguquguquki ngaphambi kocingo, ukuze iphutha lokubhala lihluleke ngesikhathi sokucushwa hhayi ngesikhathi sokungena kothile. Shintsha leyo mfihlo njenganoma yibuphi ubufakazi.

Khetha umnikazi oyedwa kukho ukuhlola. Iskripthi esibuza umgoli wemininingwane futhi sibize insizakalo ye-HTTP sidinga umthetho wobukhulu obekwe obhaliwe besimo lapho kokubili kungavumelani, ngaphandle kwalokho isizathu sokunqaba kusilog ngeke sihambisane nalokho okwatshelwa umsebenzisi.

Yisebenzise ngaphandle kokukhiya umphathi

Izivikelo ezimbili zenza ushintsho lubuyiseke: i-akhawunti yesibili yomphathi engathembeli kuskripthi, kanye nekhophi enhle eyaziwayo egcinwe ngaphandle kwefolda yezkripthi. Sebenzisa ushintsho esikhathini sokunakekela, bese ubuka ukungena kokuhlola okukodwa nokunqaba okwenziwe ngamabomu ngaphambi kokunqamuka. Uma ilog ibonisa iphutha lolimi esikhundleni sesinqumo sokuqinisekisa, iskripthi egciniwe iphukile futhi konke ukungena kuzohluleka.

Izimo ezimbili zithi linda: awukwazi ukufunda ifayela lenani njenge-root, noma awunayo indlela yesibili yokungena kusixhumi samaphathimandla. Kokubili kuguqula ushintsho oluncane lube ukukhiywa ngaphandle, futhi akukho kokubili okufanele kuhlolwe kusiphakamiso sokukhiqiza ekupheleni kosuku. Imibhalo ye-Access Server ihlanganisa isixhumi se-post-auth kanye nezinkambu ezisekelwayo.