I-Mac ihlala icela iphasiwedi ye-VPN: i-keychain noma i-akhawunti?
I-Mac ingase icele iphasiwedi ye-keychain yokungena, iphasiwedi yomlawuli noma i-akhawunti ye-VPN ngokwayo. Funda umnikazi wedayalogi, bese ulungisa isitoreji esifanele.
Uvula i-Mac, uvula iklayenti ye-VPN, futhi ishidi lephasiwedi livela ngisho ngaphambi kokuthi umhubhe uqale. Ufaka iphasiwedi yesango, bese kuthi ngandlela-thile iyenqatshwa noma ishidi libuye ngemuva kwesikhashana. Laphinda libuze ngemuva kokuvuka ebuthongweni, ukuphuma ku-akhawunti noma ukubuyekezwa kweklayenti. Lelo shidi akuvamisile ukuthi iseva ye-VPN icela imininingwane yokungena; ngokuvamile i-macOS icela imvume yokufunda, yokuvula noma yokushintsha irekhodi lendawo, futhi iphasiwedi ingeyomnikazi walelo rekhodi, hhayi eye-akhawunti yakho ye-VPN.
Qhathanisa ishidi nobunikazi obusemuva kwalo
Izikhumbuzi ezine zibukeka zicishe zifane, futhi kunye kuphela esiphathelene nesango. Amazwi, inqubo ecela ukufinyelela kanye nento eshiwo ngezansi kukutshela ukuthi ubhekene nani.
| What the sheet says | Whose password it wants | What it does not do |
|---|---|---|
| Enter the password for the login keychain | The local keychain password, normally your Mac login password | It does not authenticate you to the VPN server |
| An app wants to use confidential information stored in your keychain | Approval for that app to retrieve one item | It does not grant privileges at the gateway |
| macOS wants to make changes, and asks for administrator authorization | An admin account on this Mac, for the named setting | It does not change the VPN account password |
| The client itself asks for a username and password to connect | The remote account, certificate or profile credential | It does not unlock anything local |
Idayalogi mayelana nokufinyelela kwendawo ayifakazeli lutho mayelana neseva. Ukunqatshwa isango kubonakala ngaphakathi kweklayenti ngombhalo wephutha womhlinzeki, hhayi njengeshidi lesistimu elinikeza ukuvula i-keychain. Okuphambene nakho kuvamile: ukufaka iphasiwedi yesango eshidini se-keychain kushiya irekhodi likhiyiwe futhi kwengeza umzamo ohlulekile.
Idayalogi isho umnikazi, isitoreji kanye nesenzo
Izikhumbuzi ze-keychain zikhuluma ngokuthola, hhayi ngokuqinisekisa kubunikazi bakude. Incazelo ye-Apple yedayalogi yesicelo incane: Vumela Kanye, Vumela Njalo kanye Nenqaba zilawula ukuthi lolo hlelo lungayifunda yini into egciniwe. Akukho kulezi zintathu okunikeza ilungelo esangweni noma okushintsha lokho iseva ecishe ngakho mayelana nephasiwedi yakho.
Uma ocela kuyiklayenti elisanda kubuyekezwa, ukuvunywa kabusha kulindelekile: ukwakheka okusha akusahambisani nohlu lokulawula ukufinyelela kuleyo nto, ngakho i-macOS iyabuza futhi. Phendula ngokuthi Vumela Kanye ngesikhathi uxilonga. Vumela Njalo kuwukuvuma okungapheli kulolo hlelo futhi kuyimpendulo engalungile kunqubo esizayo ongayilindelanga; nqaba futhi uhlole umhlinzeki uma ibhinari kungeyona iklayenti oyifakile.
Isikhumbuzi esicela igunya lomlawuli siyinhlobo yesithathu. Sikhomba isethingi yesistimu noma isitoreji esivikelwe esishintshwayo, futhi imininingwane esiyifunayo iyi-akhawunti yomlawuli kule Mac. Akuzona zonke izinto zomuntu siqu ze-keychain ezidinga lokho; lezo ezingemuva kokuhlelwa kwenethiwekhi zivamise ukukudinga, ngoba ukuhlelwa kungokwesistimu, hhayi kwiseshini yakho yokungena.
Iphasiwedi ye-VPN ye-Mac ingahlala kuphi
I-keychain ingenye yezitoreji ezingaba khona, hhayi incazelo yesitoreji. Ukuhlelwa kwe-VPN okwakhelwe ngaphakathi okudalwe kuzilungiselelo zesistimu kugcina imininingwane yako kanye nokuhlelwa kwenethiwekhi, njengesethingi yesistimu ephethwe. Iklayenti yomuntu wesithathu ivamise ukugcina into ku-keychain yakho yokungena: iphasiwedi evamile eboshwe ngegama lesevisi, noma iphasiwedi ye-inthanethi eboshwe ngeseva, iphrothokholi ne-akhawunti. Izinhlelo eziningi ezintsha zisebenzisa i-keychain yokuvikela idatha esikhundleni salokho, okuyinto izinto zayo ezingasoze zibonakale ku-Keychain Access.
Abantu bafuna igama le-VPN ku-Keychain Access, bangatholi lutho, bese bephenduka ngokuthi iphasiwedi ayigciniwe. Inothi le-Apple i-TN3137 lithi kukhona ukusetshenziswa kwe-keychain okungaphezu kokukodwa; ukungabonakali kulolo hlu kuvamile, akubona ubufakazi bento eyephukile.
Izinhlobo zamarekhodi nazo azishintshani. Iphasiwedi ye-akhawunti, umusho wokungena wokhiye wangasese, isitifiketi seklayenti kanye nomsindo owabiwe we-IPsec kwehluleka ngendlela ehlukile futhi kulungiswa ezindaweni ezihlukile; ukubhala futhi iphasiwedi egciniwe akusizi lutho esitifiketini esenqatshiwe. Uma i-Mac ibhaliswe ekuphathweni, iphrofayela ingomunye umnikazi: iphrofayela ye-VPN ingathwala imininingwane futhi iyiphinde iyisebenzise lapho ivuselelwa, ngakho ukususa into yendawo kungokwesikhashana kuze kube umlawuli uyishintsha.
Lapho iphasiwedi yokungena nephasiwedi ye-keychain ihlukana
I-keychain yokungena ivamise ukusebenzisa iphasiwedi yakho yokungena ku-Mac, yingakho lezi ezimbili zingahlukana. Umlawuli osetha kabusha iphasiwedi yakho esuka kwenye i-akhawunti, inqubo yokubuyisela, noma ushintsho lwedayirekhthri kungashiya i-keychain ikhiyelwe kunani elidala, bese i-macOS icela iphasiwedi ongayisethanga manje.
Lapho ungena ungabona isexwayiso sokuthi isistimu ayikwazanga ukuvula i-keychain. Ukuyibuyekeza kudinga iphasiwedi endala, okulungile uma uyikhumbula futhi akusizi lutho uma ungayikhumbuli. Izilungiso ezimbili ezithembekile i-Keychain Access, Hlela, Shintsha Iphasiwedi ye-Keychain „login“, noma i-keychain entsha yokungena lapho imininingwane edingekayo ifakwa kabusha. Inketho yesibili ichitha izinto ezigciniwe.
Ungasethi kabusha yonke i-keychain ngoba nje i-VPN eyodwa yenqaba imininingwane endala: lokho kuthatha ama-akhawunti angenzi lutho futhi akusichazi isicacile isinto.
Umyalo owodwa uxazulula umbuzo wendawo ne-kude. Buza i-keychain ngqo ngento:
security find-internet-password -s vpn.example.com -a [email protected] -g
security find-generic-password -s "Client Name" -a [email protected] -gSebenzisa iseva ne-akhawunti ezivela kuzilungiselelo zeklayenti yakho. Uma ishidi lokuvuma elifanayo livela lapho uzibuza i-keychain ngokwakho, isikhumbuzi sendawo futhi iseva ingumuntu obukeleyo. Uma into enjalo ingekho, iklayenti aliyigcini iphasiwedi lapho obucabanga khona. Ifulegi -g liphrinta imfihlo kutheminali, ngakho gwema ukwabelana ngesikrini.
Buyekeza irekhodi iklayenti eliyifunda ngempela
Uma i-akhawunti ishintshile esangweni, yishintshe lapho kuqala, bese ubuyekeza irekhodi eligciniwe ngezilungiselelo zeklayenti. Ukuhlela into ye-keychain ngesandla akuthembekile: iklayenti ingafunda enye iphari yesevisi ne-akhawunti, futhi iphrofayela ephethwe izosusa ukuhlela kwakho.
Ngento okusolwa ukuthi indala, qhathanisa isevisi, i-akhawunti nephrothokholi ngaphambi kokususa noma yini:
security delete-generic-password -s "Client Name" -a [email protected]Ukususa into enegama elifanayo kusuka kolunye uxhumano kuwukuphazamiseka okuvamile okuzibangelayo. Ukususa kungokwendawo kuphela: akukhanseli iseshini esangweni, akukhululi isitifiketi sedivayisi, futhi akushintshi iphasiwedi ye-akhawunti.
Qinisekisa ukuthi isilungiso sihlala sikhona ngemuva kokuqalisa kabusha
Xhuma, vuka ebuthongweni, phuma bese ungena futhi, bese uqalisa kabusha kanye. Ukulandelana okuhlanzekile ngaphandle kweshidi kanye nesimo seklayenti esisho i-akhawunti elindelekile kuwubufakazi kuphela obalwayo. Lapho isikhumbuzi sibuya khona kukutshela ukuthi yiluphi ungqimba olwedlulile: ngemuva kokubuyekezwa kuwukuvuma, ngemuva koshintsho lwenethiwekhi kuyisikhumbuzi seklayenti ngokwayo, ngemuva kokuqalisa kabusha kuyiphrofayela ebuyisela isimo.
Hlola iklayenti ngesethingi yokukhumbula iphasiwedi noma yokuhlala ibuza ngaphambi kokuthinta i-keychain futhi. Okunye ukuhlelwa, ikakhulukazi i-IKEv2 enokuqinisekiswa komsebenzisi ngamunye, kubuza ngokwakhiwo kukho konke ukuxhuma; ukulungisa i-keychain ngeke kusize.
Bhala phansi into oyishintshile, isitoreji ebesingumnikazi wayo kanye ne-akhawunti ebesiyingxenye yayo, ukuze isikhumbuzi esilandelayo sithathe imizuzwana ukusibeka. Ikhasi le-Apple lezicelo zokufinyelela kwe-keychain liyireferensi yalokho lezi zinkinobho ezintathu ezikugunyazayo.