I-Kerberos SSO ne-VPN ku-Mac: qhathanisa izindlela ezimbili zokungena

Izindlela ezimbili zikhiqiza umphumela ofanayo onobungane ku-Mac kodwa ziziphatha ngokuhluke ngokuphelele ngaphansi. Enye ithola amathikithi e-Kerberos ngesandiso se-SSO bese iwanikeza izinhlelo ezibamba iqhaza. Enye igcina isikhathi sesiphequluli nomhlinzeki wobunikazi futhi ivumele izinhlelo zewebhu ukuthi sikuqashele. Ziyahluka kulokho ezikudingayo kunethiwekhi, ukuthi iziqinisekiso zazo zihlala isikhathi esingakanani, nokuthi kwenzekani ngesikhathi umhubhe uwela.

Izindlela ezimbili, isikrini esisodwa sokungena

Indlela esekelwe kumathikithi incike esizindeni se-Kerberos, isikhungo sokusabalalisa ukhiye kanye newashi elivumelana nalo. Indlela yesiphequluli incike kumhlinzeki wobunikazi ofinyelelekayo, ikhukhi noma ithokheni, kanye nohlelo olwethemba lowo mkhiphi. Zombili zingalungiselelwa ukuqala lapho kungena, yingakho zithathwa njengento eyodwa. Izinhlelo zinquma ukuthi yikuphi kokubili ezikwamukelayo, futhi i-Mac ingasebenzisa kokubili ngasikhathi sinye ngokusemthethweni.

Ziqhathanise ngokubuza ukuthi uhlelo luhlola ini lapho umsebenzisi eluvula. Insizakalo yamafayela ehlangene nesizinda se-Kerberos ifuna ithikithi lensizakalo, futhi akukho nani lesikhathi sesiphequluli elizokwanelisa lokho. Uhlelo lwewebhu olungemuva komhlinzeki wobunikazi wesimanje lufuna ithokheni yalowo mhlinzeki futhi lungalinaki neze ithikithi le-Kerberos. Lapho usazi ukuthi yikuphi ukuhlola okwenzekayo, imibuzo yokuthunyelwa iba ecacile esikhundleni sokujwayelekile.

Okudingwa isandiso se-Kerberos kunethiwekhi

Umhlahlandlela wesandiso se-Kerberos SSO we-Apple uchaza ubuqiniso bomdabu be-Active Directory ngokutholwa kwamathikithi kusengaphambili, kuhlotshaniswa nama-akhawunti endawo esikhundleni sokuxhumana nesizinda. Engenakukwenza ukusungula indlela eya kuzilawuli zesizinda. I-Mac idinga isixazululi esiphendula amarekhodi ensizakalo ye-Kerberos, kanye nomzila ofinyelela kuwo ngomhubhe ogunyaziwe. Iphrofayela efakwa ngokuhlanzekile ayifakazeli lutho kuze kube yilapho isizinda sitholakala ngempela kusukela kuklayenti.

Hlola ukutholakala ngaphambi kokuhlola iziqinisekiso: amarekhodi e-SRV esizinda se-Kerberos kufanele axazululwe, futhi amakheli ewabuyisayo kufanele afinyeleleke lapho i-VPN isiphakamile. Isikhathi sibalulekile njengokufinyeleleka, ngoba i-Kerberos iyala izicelo ezivela ewashini eliphume ngaphesheya kokubekezelela kwalo, futhi iphutha elikukhiqizayo libonakala njengokwehluleka kokuqinisekisa. I-Mac engakwazi ukufinyelela umthombo wesikhathi ngenkathi umhubhe uphansi izophinde yehluleke ngaso leso sikhathi lapho ubuya. Lungisa umthombo wesikhathi njengengxenye yokuthunyelwa hhayi njengempendulo yesigameko.

klist
sudo sntp -sS time.apple.com

I-VPN yohlelo ngalunye inquma ukuthi isandiso singasebenza yini

Umhubhe ogcwele uqondisa konke futhi ufihla le nkinga. Ukulungiselelwa kohlelo ngalunye kuqondisa kuphela izinhlelo ezishiwo kuphrofayela ye-VPN, futhi isandiso se-SSO ngokwaso siyinqubo edinga inethiwekhi ukuze ithole amathikithi. Uma singekho ekuhlelweni, ukungena kwendawo kuyaphumelela, umhubhe uyaphakama wesiphequluli, futhi ukutholwa kwamathikithi kusahluleka.

Funda ukulungiselelwa kwe-VPN futhi ufake ohlwini uhlelo ngalunye okufanele ilusihlanganise, bese wengeza ingxenye ye-SSO ngomshini wokuhlela obhaliwe esikhundleni sokuqagela isihlonzi sebhandela. Ukuhlela iklayenti elibonakalayo hhayi ingxenye engemuva kwayo yiwona hlobo lwakudala lwaleli phutha. Gcina ukuhlela kuphrofayela efanayo elawulwayo nesandiso, ukuze ushintsho kolunye lungakwazi ukwenza olunye lungasebenzi ngokuthula. Hlola nomsebenzisi ongakaze angene kuleyo Mac, ngoba ithikithi eligciniwe lingenza umzila ophukile ubonakale uphilile, bese uphinda uhlole ngemva koshintsho lwephasiwedi.

Isikhathi sobunikazi besiphequluli siyisivumelwano esihlukile

Isikhathi sesiphequluli asinaso isizinda se-Kerberos, asinaso ithikithi lensizakalo futhi asinaso ukubekezelela kwewashi ngomqondo we-Kerberos. Sinesikhiphi, ubude bokuphila kwethokheni kanye nomzila wokuvuselela, futhi izindlela zaso zokwehluleka yiziphambukiso ezingapheli kanye namakhukhi alahlwa iwindi langasese. Ukusithatha njengokungena esikhundleni somzila wamathikithi kuphephile kuphela lapho uhlelo ngokwalo lwamukela lowo mkhiphi. Ukukopisha impendulo yokuqinisekisa isuka kungqikithi ye-VPN iye ensizakalweni engahlobene akusona ukuhlanganisa, kungakhathaliseki ukuthi indlela emfushane ibukeka ikahle kangakanani.

Lapho zombili izindlela zithunyelwe, bhala phansi ukuthi yiziphi izinhlelo ezisebenzisa okukupi, ngoba ingxoxo yosekelo incike kulokho. Umsebenzisi obika ukuthi ungene kodwa engakwazi ukuvula ukwabiwa kwamafayela uchaza izinhlelo ezimbili, futhi impendulo ukuthi umzila wamathikithi awukaze usebenze. Umsebenzisi ongakwazi ukuvula ukwabiwa kodwa hhayi ingqikithi ye-intranethi uchaza okuphambene, futhi ukusho umshini ethikithini konga umjikelezo wemibuzo.

Landela ukulandelana, hhayi izingxenye

Landela lonke uchungechunge nge-akhawunti evamile ebhalisiwe: ukungena kwendawo, umhubhe, ukutholwa kwamathikithi, bese kuba umsebenzi owodwa wangempela oqondiswe ensizakalweni. Kuphinde lokho ngemva kokuxhumana kabusha komhubhe nangemva koshintsho lwephasiwedi lwangamabomu, ngoba ngakunye kwalezo zimo kuqeqesha ingxenye ehlukile yomqondo wobude bokuphila. Ukuthi isigaba ngasinye sidlule sisodwa akufani nokuthi uchungechunge luyasebenza. Uchungechunge yikho umsebenzisi akuzwayo, futhi yikho okumele kuhlanganiswe yicala lokwamukela.

Bhala phansi umnikazi wephrofayela, indlela yokuqinisekisa ye-VPN, umzila wokutholakala kwesizinda kanye nokuhlelwa kwezinhlelo zesandiso endaweni eyodwa. Lowo mbhalo yiwona owenza ukugeleza kuphindwe kukhiqizwe ngumuntu ongakwanga ukukwakha. Bese uhlola ukwehluleka okungenzeka kakhulu ukuthi uhlangane nakho, ithikithi eliphelelwe yisikhathi ngenkathi umhubhe uphansi, futhi uqinisekise ukuthi iklayenti liyalulama ngaphandle kokuqalisa kabusha, ngoba ukuthunyelwa okusebenza kuphela kusukela ekuqaleni okubandayo akukapheli.

Phawula nomnikazi wesigaba ngasinye, ngoba isizinda se-Kerberos okungekho muntu osinakekelayo siyaguga. Uchungechunge okungekho muntu ongaluchaza wuchungechunge okungekho muntu ongalulungisa.