Iphrofayili ye-VPN yase-Mac ephethwe ayisusi? Hlola lezi zinyathelo ezi-5
Ngaphambi kokususa iphrofayili ye-VPN yase-Mac ephethwe, qinisekisa ukuthi ingubani umnikazi wayo, ukuthi i-payload iphoqelela ini nokuthi kungani ukususwa kuvinjiwe, usebenzisa izinyathelo ezinhlanu ezilandelanayo.
I-Mac yakho igcina iphrofayili ye-VPN enqaba ukususwa, noma isuswe bese ibuya ngemva kokuqalisa kabusha. Lokho ngokuvamile kuwumbuzo wokuphatha, hhayi iklayenti elonakele. Izinto ezihlolwayo ngezansi zisuka ebunikazini ziye ku-payload bese ziya emithethweni yokuxhuma kabusha, futhi ngayinye ingakumisa ngaphambi kokuba uchithe intambama endaweni engafanele. Zenze ngokulandelana; isinyathelo lapho impendulo ishintsha khona yilapho ingxenye yakho iphela khona.
Qinisekisa ukuthi iphrofayili iphethwe, hhayi nje igciniwe
Vula i-System Settings bese ufuna i-Profiles noma i-Device Management. Kuye ngezinga le-macOS, uhlu lutholakala ngaphansi kwe-Privacy & Security (Profiles) noma i-General (Device Management). Iphrofayili ebonisa igama lenhlangano, incazelo emfushane futhi engenalo inkinobho yokukhipha yafakwa inhlangano, hhayi wena.
Ukuhlola okubili ku-terminal kunquma ubunikazi ngokushesha. Okokuqala kubika ukubhaliswa, okwesibili kuklela amaphrofayili edivayisi:
sudo profiles status -type enrollment
sudo profiles -PUma ukubhaliswa kuthi yebo kodwa uhlu lwamaphrofayili lungenalutho, ungaphethi ngokuthi akukho okufakiwe. Kuma-Mac aphethwe, amanye ama-payload alethwe yi-MDM ahlala efihlekile kuthuluzi le-profiles kuyilapho esasebenza. Iphaneli ye-Device Management iwumbono ogunyaziwe walokho okuthunyelwe inhlangano, futhi uhlu olungenalutho lomugqa womyalo ku-Mac ebhalisiwe kungukuphikisana okungafanele ukuxazulula ngokuqagela.
Funda i-payload, hhayi igama elibonakalayo
Iphrofayili ye-VPN iyisitsha, futhi igama elibonakalayo lisho okuncane kakhulu mayelana nalokho okungaphakathi kwayo. I-payload eyodwa ingaqukatha ikheli leseva ye-IKEv2, isihlonzi esikude, indlela yokuqinisekisa kanye nesitifiketi esine-UUID yaso. I-payload yesibili kuleyo phrofayili inganikeza isitifiketi sobunikazi esidingwa umhubhe, yingakho isitifiketi esibonakala singekho ku-Keychain sengasafika ngayo leyo phrofayili.
Khipha ama-payload bese ufunda okhiye abalulekile:
sudo profiles show -type configuration | grep -A3 -E "VPNType|ServerAddress|RemoteAddress|AuthenticationMethod|PayloadUUID"Bhala phansi ama-UUID e-payload ngaphambi kokushintsha noma yini. Yizona zihlonzi umphathi azidingayo ukuze athole into ngqo, futhi zikutshela nokuthi umhubhe nesitifiketi zivela emthonjeni munye noma ekusetshenzisweni okubili okuhlukene.
Bheka ukuthi yini ebuyisa umhubhe
Uma umhubhe uqala kabusha ngokwawo, iphrofayili cishe inawo umthetho we-On Demand. Umthetho ohambisana nanoma iyiphi i-interface futhi onesenzo esithi Connect uqala umhubhe lapho i-Wi-Fi ixhumana, lapho i-Mac ivuka ebuthongweni, noma lapho ukuhlolwa kwe-DNS kuhluleka. Iklayenti alivezi iswishi edlula i-payload.
Uhlu lwezinsizakalo nokucushwa kwensizakalo ngayinye kuvela ku-scutil:
scutil --nc list
scutil --nc show "Corporate VPN"Kokuphuma kwe-show, thola i-OnDemandRules bese ufunda inani le-Action yonke ingeno. I-Connect ikhuphula umhubhe, i-Disconnect iwuhlisa, kanti i-Ignore ishiya isimo samanje singashintshiwe. Umthetho wokuqala ohambisana nakho konke futhi one-Connect yisizathu esivamile sokuthi umhubhe ungahlali uphansi ngemva kokunqamuka kwakho.
Uma uxhumano ungekho ku-scutil --nc list, awufakwanga njengensizakalo ye-VPN yesistimu. Lokho kukhombisa isandiso senethiwekhi esiphethwe uhlelo lokusebenza lweklayenti, lapho iphrofayili ingadlulisela kuphela ukucushwa kohlelo lokusebenza futhi uhlelo lokusebenza ngokwalo lunquma ukuthi luxhuma nini.
Nquma ukuthi ukususwa kungokwakho yini
Izindlela ezimbili zivimbela ukususwa. I-payload ingasetha i-PayloadRemovalDisallowed, okwenza iphrofayili ingasuseki ku-interface, futhi i-Mac ingaba ngaphansi kokuqondiswa ukuze ukususwa kwephrofayili yokuphatha kunqatshwe ngokuqondile. Kokubili akulona iphutha, futhi ukususa izitifiketi ezingahlobene noma iphrofayili yokuphatha ukuze uphoqelele udaba kukushiya nenkinga enkulu kakhulu kunaleya oqale ngayo.
| What you see | Likely owner | Next action |
|---|---|---|
| Profile shows an organization name and no minus button | MDM enrollment | Ask the administrator to remove it or change its scope |
| Profile removable, personal IKEv2 settings | You | Remove it from VPN settings and re-add it if you still need it |
| Profile removed, returns after a reboot or check-in | MDM re-push | Request a scope change; deleting it again will not hold |
| Profile removed, tunnel still starts | On Demand rule or app login item | Remove the rule or the login item, then retry |
Ku-Mac yomsebenzi, indlela yokusekelwa noma yokuphuma komphathi iyona efanele. Hamba nesihlonzi sephrofayili. Ithikithi elithi kuphela “iphrofayili ye-VPN” alanele ukuthi noma ubani athole into oyishoyo.
Qoqa ubufakazi ngaphambi kokucela usizo
Bhala izinto ezinhlanu: isihlonzi sephrofayili, ama-UUID e-payload, inguqulo ne-build ye-macOS evela ku-sw_vers, uhlobo oluncane lwe-VPN, kanye nombhalo wephutha oqondile onesiginesha yesikhathi. Engeza ukuthi umhubhe ugcwele noma uhlukanisiwe nokuthi uhluleka ngesikhathi sokuxhuma noma ekufinyeleleni kokuqala ensizakalweni yangaphakathi, ngoba lezi ziphutha ezimbili zinabanikazi abehlukene.
Ekwehlulekeni kwesandiso senethiwekhi, umbuzo owodwa wokuloga omncane ngokuvamile wanele:
log show --last 5m --predicate 'process == "nesessionmanager"'Thwebula imigqa ezungeze umzamo hhayi iwindi lonke, futhi ususe amagama eziseva nezingqikithi zezitifiketi ngaphambi kokuthumela umphumela noma kuphi. Umhlahlandlela wokusetshenziswa we-Apple uchaza ukuthi ama-payload e-VPN aphethwe nemithetho ye-On Demand aklanyelwe ukwenzani, futhi lokho kuyisizathu esingcono kunesithombe sesikrini: Uhlolojikelele lwe-VPN.
Lapho zonke izinto ezinhlanu zihloliwe, okukodwa kokuthathu kuyiqiniso ngqo. Iphrofayili akuyona eyakho ukuyisusa, i-payload ixhuma kabusha umhubhe ngokuklanywa, noma iklayenti liphethe ukucushwa iphrofayili engakaze ikulawule. Yisa izihlonzi nomugqa wesikhathi kumnikazi wokubhaliswa; lelo yithikithi umuntu angalisebenzisa. Ukucindezela ukususa futhi akusilo.