I-client-config-dir iyanganakwa ngemuva kokuba i-OpenVPN ibe yisevisi

Umhubhe wakho uyaphakama futhi iklayenti iyaxhuma, kodwa ikheli eliqinile kanye nemizila eqhutshwayo oyichazele lowo msebenzisi oyedwa ayikho. Ilogi ayisho “file not found”, futhi yikho kanye okuthumela abantu ukuba bakhiqize kabusha izitifiketi. Ezimweni eziningi zalezi idaimoni isebenza kusuka kudirectory ehlukile kulelo shell ohlole kulo, futhi client-config-dir ayikaze ixazululwe ngendlela obucabanga ngayo. Ukulungiswa iwukulungiswa kwendlela, hhayi ukusethwa kabusha kwezifakazelo.

Funda i-unit ngaphambi kokuthinta ukucushwa

Qala ngenqubo esebenzayo ngempela, hhayi ngefayela olilungisile. Buza i-systemd ngomugqa wokwenza, idirectory yokusebenza kanye ne-akhawunti eyehlayo kuyo. Lezi zimpendulo ezintathu zichaza iningi lokuphahlazeka kulesi sigaba:

systemctl show openvpn-server@server -p ExecStart -p WorkingDirectory -p User -p RootDirectory

WorkingDirectory engenalutho isho ukuthi i-unit iqala ku-/, ngakho-ke client-config-dir ccd ehlobene iyadingwa ku-/ccd. Leyo directory cishe ayikho, futhi idaimoni ayikuthathi ukungabikhona kwayo njengokubulalayo.

Qhathanisa nalokho nokuqaliswa okusebenzisanayo okusebenzise ngesikhathi sokuhlola, lapho idirectory yamanje ye-shell yakho cishe yayiyidirectory yokucushwa. Ifayela elifanayo, amagama afanayo, imiphumela emibili ehlukene.

Indlela ehlobene ixazululwa ngokuya ngani

Igama elingukhiye lixazululwa ngokuya kudirectory yokusebenza yenqubo ngesikhathi kusetshenziswa inketho. Akusho ukuthi “eceleni kwefayela lokucushwa engilidlulise nge---config”. OpenVPN izofunda ngokuzimisela ukucushwa kusuka endleleni ephelele futhi nokho ixazulule amanani ahlobene kwenye indawo, futhi yilokho kanye ugibe lapha. Incwadi ye-OpenVPN 2.6 isho umthetho ngaphansi kwe---client-config-dir futhi futhi ngaphansi kwe---cd.

Igama elingukhiye cd lishintsha leso simo ngaphambi kokuba amanye amafayela afundwe, ngakho-ke i-unit esetha cd /etc/openvpn/server bese kuba client-config-dir ccd ixazululwa ibe /etc/openvpn/server/ccd. Uma wengeza cd, hlola ukulandelana kwemiyalelo futhi ukhumbule ukuthi kuthinta zonke ezinye izikhombo ezihlobene kulelo fayela.

Hamba indlela njenge-akhawunti yedaimoni

Indlela ingase ilunge kodwa ingafundeki. Ngemuva kokwehlisa amalungelo idaimoni ayisewona i-root, ngakho-ke yonke idirectory yomzali idinga imvume yokusesha yaleyo akhawunti, futhi ifayela leklayenti ngokwalo lidinga imvume yokufunda. Ibhithi elilodwa lokwenza elingekho kumzali lanele ukufihla ifayela, futhi iphutha livela kuphela njengeklayenti elithola buthule ichibi elizenzakalelayo.

namei iphrinta imvume yengxenye ngayinye ngokulandelana, okuyishesha kunokuhlola amadirectory ngamanye:

namei -l /etc/openvpn/server/ccd/client1

Bese uhlola ukufunda njenge-akhawunti yesevisi hhayi njengawe:

runuser -u openvpn -- test -r /etc/openvpn/server/ccd/client1 && echo readable

Uma i-unit isebenzisa chroot, idirectory kumele ibe khona ngaphakathi kwejele, futhi indlela ekucushweni ichazwa ngemuva kokusetshenziswa kwe-chroot. Ifayela elisemsingathi ngaphandle kwejele alibonakali ngaphakathi.

Qinisekisa ukusesha esikhundleni sokuqagela

Khuphula izinga lelogi kokukodwa kokusethwa kabusha futhi ufunde okushiwo iseva mayelana nezinketho eziqondene neklayenti. Ku-verb 4 idaimoni ibika ukucushwa kweklayenti ngayinye ekungenisile, ngakho-ke umugqa ongekho uwubufakazi obuqondile bokuthi akukho fayela elifundiwe ngalokho kuxhumana.

openvpn --config /etc/openvpn/server.conf --verb 4 --client-config-dir /etc/openvpn/server/ccd

Gijimisa lokho ngaphambili embobeni engenalutho futhi uxhume iklayenti elilodwa. Lokho kususa i-systemd ngokuphelele esithombeni: uma ukushintshwa kuvela lapha hhayi ngaphansi kwesevisi, umehluko usimweni se-unit, hhayi efayeleni.

Nquma ukuthi kufanele kwenzeke ini uma kungekho fayela elihambisanayo. Ngaphandle kwe-ccd-exclusive iklayenti lamukelwa kuphela ngezilungiselelo zechibi lomhlaba, futhi lokho kuwukwehluleka buthule okuchazwe ngenhla. Nakho, ifayela elingekho liba ukuxhumana okunqatshiwe, futhi lokho kunqatsha kulula ukuqaphela kodwa kunzima ukulungisa ngaphansi komthwalo.

Lungisa, qalisa kabusha, qinisekisa

Yenza idirectory ibe nephelele ekucushweni futhi uyishiye injalo. Izindlela ezihlobene ziphephile kuphela uma i-unit ibopha idirectory yokusebenza, futhi ukubopha kuyingxenye enyakazayo eyengeziwe ezoshanelwa othile kamuva.

client-config-dir /etc/openvpn/server/ccd
ccd-exclusive

Qalisa kabusha isethulo, xhuma kabusha iklayenti elaziwayo futhi ufunde ikheli elilitholile kanye nemizila eqhutshwe kulo. Uma ikheli lihambisana nomugqa ifconfig-push efayeleni lalelo klayenti, ukusesha kusebenzile. Uma iklayenti lisawela echibini elijwayelekile, buyela ekubaleni kwemigqa yelogi: ukungeniswa kweziro kusho ukuthi indlela noma ubunikazi akulungile, ukungeniswa okukodwa okunokuqukethwe okungalungile kusho ukuthi uhlela elinye ifayela kunalelo elifundwa idaimoni.

Buyela emuva ngokubuyisela i-unit nokucushwa kwangaphambilini ndawonye, bese uqalisa kabusha. Izitifiketi akudingeki zikhishwe kabusha nganoma yikuphi kwalokhu, futhi ukuthatha inkinga yedirectory njengenkinga yezifakazelo yiyo indlela ukulungiswa kwemizuzu emihlanu okuba yiwindi lokunakekela.