Imfihlo engavumelekile iyinkinga yesiqukathi, hhayi umthetho wephasiwedi
Ubufakazi obunqatshiwe kungenzeka ukuthi abuzange bufike esangweni. Qhathanisa isiqukathi sokufaka, isigaba sokuqinisekisa kanye ne-akhawunti uqobo kuqala.
Ukubona umlayezo wokuthi imfihlo ayivumelekile ngokuvamile kulethela isiphetho esisodwa: i-VPN ayithandi izimpawu zokubhala. Leso siphetho ngokuvamile asilungile, ngoba umlayezo uvamile ukuvela ekuphathweni kwasekhaya ngaphambi kokuba noma isiphi isango libheke i-akhawunti. Imiklamo emibili ihambisa iphasiwedi efanayo, inkundla yezithombe nefayela lobufakazi, futhi yehluleka ezindaweni ezihlukene. Qhathanisa iziqukathi ngaphambi kokwenza lula iphasiwedi eyayilungile kuwo wonke umkhathi.
Iphutha liza ngaphambi kwesango
Ukuqinisekisa kwasekhaya, isitolo semfihlo esikhiyiwe, i-ejenti engekho kanye nefayela lobufakazi elakhiwe kabi konke kukhiqiza ukwehluleka umsebenzisi akubona njengokunqatshwa okukodwa. Akukho kukho okuhilela iseva yokuqinisekisa. Ukunqatshwa kwesango uqobo kuyisigameko esihlukile, futhi ngokuvamile kufika nomlayezo ohlukile nesikhathi esihlukile. Kwenzeka ngemva kokuba itheneli likhona futhi ubufakazi buseqhutshwe.
Ngakho umbuzo wokuqala awukho mayelana nokuthi yiziphi izinhlamvu ezivumelekile kodwa ukuthi umzamo wema kuphi. Iklayenti elingakaze livule uxhumano alikanqatshwanga muntu. Bhala phansi isigaba osibonile, ngoba sonke isinyathelo esilandelayo sincike kulokho kuhlukanisa.
Umehluko ushintsha futhi ukuthi ubani okufanele akulungise. Inkinga yesiqukathi ingeyedivayisi nomsingathi wayo, kanti ukunqatshwa kwe-akhawunti kungokwalowo ophethe i-backend yokuqinisekisa.
Qhathanisa iziqukathi, hhayi izinhlamvu
Inkundla yephasiwedi ye-GUI, ingeno ye-keychain, ifayela lobufakazi elinemigqa emibili kanye nemfihlo yokuzenzakalela konke kuthwala inani elifanayo kusigaxa esihlukile. Isigaxa sinemithetho yaso, futhi yiyo leyo mitherho evamile ukuphula. Inani akuvamile ukuba yinkinga; ukuthuthwa kwenani yikhona okuvamile. Hlukanisa le micabango emibili bese ukuxilongwa kuba mfushane.
| Where the value stops | What you see | What you check | Who owns the fix |
|---|---|---|---|
| GUI field or managed profile | A validation message before any connection opens | The selected authentication mode and whether the field holds the secret or the username | The device owner or the profile author |
| Keychain or secret agent | A prompt that keeps reappearing, or an agent error | Whether the agent is unlocked and holds an entry for this profile | The user who owns the keychain |
| Two-line credential file | A prompt for a password that was already supplied | Line count, line order and whether a trailing newline is present | Whoever generated the file |
| Shell argument or environment | Works interactively but fails in automation | Whether the shell expanded, trimmed or logged the value | Whoever wrote the automation |
Izinketho zeklayenti le-Community OpenVPN 2.6 zichaza leyofayela elinemigqa emibili le-auth-user-pass, kufaka phakathi indlela yokuziphatha uma umugqa wephasiwedi ungekho: iklayenti liyabuza esikhundleni salokho. Leyo nsonywana eyodwa ichaza iqembu lemibiko ethi ingibuza iphasiwedi esengiyinikezile. Ikupsa futhi ikwazisa ukuthi umugqa wesibili oyingenalutho uyisimo esinengqondo hhayi ukukhetha kokufometha okungenabungozi.
Izicaphuno ziwunye futhi ungqimba oluhlukile: izicaphuno ngaphakathi kwefayela lobufakazi elivamile zigcinwa njengedatha, kanti i-shell izisusa ngaphambi kokuba uhlelo lubone noma yini. Uhlavu olufanayo alunabungozi endaweni eyodwa futhi lunomumo kwenye. Ithebula alikwazi ukukutshela ukuthi iklayenti lakho lisebenzise isiphi isiqukathi, ngakho funda ukuhlelwa kweklayenti uqobo ngaphambi kokukhetha umugqa.
Ukuphumula kwemigqa nakho kunomumo. Ifayela elinezinkambu ezihlukaniswa ngemigqa alikwazi ukuthwala inani eliqukethe ukuphumula komugqa, futhi lokho kuwumkhawulo wefomethi hhayi isahlulelo ngamandla ephasiwedi. Sebenzisa indlela yokuletha esekelwayo yokuthunyelwa esikhundleni sokunciphisa imfihlo ukuze ilingane nefayela elenziwe ngokushesha.
Yakha ifayela lobufakazi ngaphandle kokulimala kwe-shell
Indlela yasekhaya ephephe kakhulu igcina imfihlo ingekho emlandweni we-shell nakuhlu lwama-argument wesuhlelo. Funda zombili izinkambu ngokuhlanganyela, bese ubhala imigqa emibili iklayenti eliyilindele. Konke okunye kungahlala kufayela lokuhlelwa okulula ukulibuyekeza.
read -r VPN_USER
read -rs VPN_PASS
printf '%s\n%s\n' "$VPN_USER" "$VPN_PASS" > /etc/openvpn/client/creds
chmod 600 /etc/openvpn/client/creds
openvpn --config /etc/openvpn/client/office.conf --auth-user-pass /etc/openvpn/client/credsImiyalo emibili yokuqala ifunda igama lomsebenzisi bese iphasiwedi ngaphandle kokuyikhombisa, eyesithathu ibhala yomibili imigqa, eyesine icindezela ifayela, futhi eyokugcina iqala iklayenti ngalelofayela. Qaphela ukuthi read -r igcina ama-backslash, okuyisona simo semininingwane esenza iphasiwedi esebenzayo ibe iphasiwedi ehlulekayo uma ishiywe.
Gwema ukwakha ifayela nge-variable engenazicaphuno noma nge-here-document egcwele ukunwetshwa kwe-shell. Kokubili kungashintsha izinhlamvu ngaphambi kokuba zifike efayeleni, futhi ukwehluleka okuvelayo kubonakala njengokunqatshwa kwe-VPN ngoba iphasiwedi esediskeni ihluke ngempela kuleyo oyaziyo. Uma usola lokhu, qhathanisa ubude befayela ngamabhayithi nenani elilindelekile ngaphandle kokuphrinta imfihlo uqobo. Ukwehluka kwekhayithi elilodwa noma amabili wuphawu lwengozi yezicaphuno.
Funda isigaba emlayezweni wokuqala wephutha
Gcina umlayezo ocacile wokuqala womzamo owodwa, bese uwuhlukanisa. Iphutha lokuqinisekisa kwasekhaya, ukhiye oyimfihlo ongekho, i-ejenti yemfihlo engatholakali kanye nokwehluleka kokuqinisekisa kwesango yimiphumela emine ehlukene enabanikazi abane abahlukene. Kungeyodwa kuphela kuyo ephathelene ne-akhawunti.
Uma isango ngempela linqaba ubufakazi obulethwe ngendlela efanele, hlola i-akhawunti, i-backend yokuqinisekisa kanye nanoma yisiphi inselelo edingekayo nomqondisi. Ukwehluleka kokuqinisekisa okuvamile akusho uhlamvu olwenqatshiwe.
Buyisela inani elivunyiwe ngendlela efanele esikhundleni sokulinciphisa libe izinhlamvu namadijithi. Umthetho wephasiwedi ungowomqhubi, futhi indlela yokweqa eyenza ukuthi unganakwe ayisiso isisombululo. Iphinde ifihle isici sangempela kumuntu olandelayo, ozohlangabezana nalelo phutha ngephasiwedi ebuthakathaka kakhulu nangaphandle komqondo ongcono.