Ukuhlela isabelo sefayela le-VPN nge-akhawunti ye-Samba eyaziwa yiseva

Xhuma ithuneli futhi isabelo sisacela iphasiwedi umsebenzisi acabanga ukuthi ilungile. Ekusetshenzisweni kwe-Samba ezimele, ukungena kwe-VPN nokungena kwe-SMB kuyizimo zokufakazela ezingahlobene: okunye kugunyaza ithuneli, okunye kuhlolwa yiseva yamafayela. Ngakho ukuhlela idrayivu nge-akhawunti ye-VPN kuyahluleka ngisho iphasiwedi ilungile futhi indlela yenethiwekhi iphelele. Lomehluko uchaza iningi lokwehluleka kokuhlela ngokusebenzisa i-VPN.

Isixazululo akukona ukusetha kabusha i-akhawunti ye-VPN. Isixazululo ukusho ubunikazi iseva ye-Samba eyazi ngempela, bese uqinisekisa ukuthi lobo bunikazi bunamalungelo esabelweni nakukhombi.

Ukungena kwe-VPN nokungena kwe-SMB kungobunikazi obuhlukene

I-akhawunti ye-VPN ihlolwa yisango le-VPN ngokwenqubomgomo yalo. Liphendula ukuthi iklayenti ingena yini kunethiwekhi yangasese. Alisho lutho ngokuthi iyiphi i-akhawunti ye-SMB ekhona kuseva yamafayela ngaphakathi kwaleyo nethiwekhi.

I-akhawunti ye-Samba ihlala kungxenye engemuva yokuqinisekisa yeseva, ngedathabhezi yayo yamaphasiwedi negama layo. Amakhompyutha amabili angaba nomsebenzisi ogama lakhe lingu-alice ngaphandle kokwabelana ngohlelo lobunikazi, iphasiwedi noma isihlonzi somsebenzisi. Amagama ayafana; ama-akhawunti awafani.

Iseva ye-Samba ehlangene nesizinda ishintsha isithombe: ubunikazi buvela kukhombi naku-Kerberos, hhayi ohlwini lwama-akhawunti endawo. Uma kunjalo sebenzisa ubunikazi bukhombi nokucushwa kwe-SMB okusekelwayo esikhundleni sokwakha amakhophi endawo okulingisa ubulungu besizinda. Hlola ukuthi iseva isebenzisa imuphi umodeli ngaphambi kokwakha noma iyiphi i-akhawunti.

Bheka ukuthi i-Windows isebenzisa luphi ubunikazi ngempela

I-Windows igcina ukuxhumana kusikhashana ngeseva ngayinye. Uma isikhathi esikhona esiya kuyo leyo seva savulwa ngenye i-akhawunti, ukuhlela okusha kungase kusebenzise leso sikhathi futhi noma kwehluleke ngephutha lokuqinisekisa elisho umsebenzisi ongafanele. Yile ndlela iphasiwedi elungile ebonakala ingalungile. Hlola ukuxhumana kwamanje ngaphambi kokushintsha izimo zokufakazela.

net use
cmdkey /list
klist

Umyalo wokuqala ukhombisa amadrayivu ahleliwe nezikhathi ezivuliwe, owesibili ukhombisa izimo zokufakazela ezigciniwe ezingasetshenziswa ngokuzenzakalela, nowesithathu ukhombisa amathikithi e-Kerberos uma kusetshenziswa isizinda. Isimo esigciniwe singashintsha buthule i-akhawunti owawuhlela ukuyibhala.

Susa kuphela uxhumano noma isimo sokufakazela esiphathelene nale nkinga. Ukunqamula wonke amadrayivu noma ukufaka ikheli le-IP esikhundleni segama leseva kufihla ukukhethwa kobunikazi futhi kungaphula ukusayina noma inqubomgomo esekelwe emagameni.

Hlela isabelo nge-akhawunti eyaziwa yiseva

Nikeza i-akhawunti ngendlela iseva eyilindele futhi uvumele i-Windows ukuthi ibuze iphasiwedi, ukuze imfihlo ingangeni emlandweni wemiyalo noma kuskripthi:

net use Z: \\files.corp.example\team * /user:FILESERVER\alice /persistent:no

Ingxenye yeseva ngaphambi kukabhakishi ongena emuva iyindawo yobunikazi bes eva ye-Samba, hhayi isango le-VPN. Inkanyezi icela isikhombisi sephasiwedi esisebenzisanayo, futhi /persistent:no igcina ukuhlela ngaphandle kokungena okulandelayo. Khetha uhlamvu lwedrayivu olungenalutho.

Uma iseva ihlangene nesizinda, ingxenye yomsebenzisi ingase ibe igama lekhombi noma ubunikazi obufanele isizinda. Sebenzisa indlela ebhalwe ngumphathi; ukusungula i-akhawunti yendawo ngegama elifanayo kudala ubunikazi besibili nephasiwedi yesibili okufanele inakekelwe.

Ukusebenza kwe-akhawunti, ukufinyelela esabelweni namalungelo esistimu yamafayela yizihlolo ezintathu

I-Samba ihlola ukuthi ubunikazi buqinisekisiwe yini, ukuthi incazelo yesabelo iyabamukela yini, nokuthi isistimu yamafayela inikeza umsebenzi oceliwe yini. Ukudlula isihlolo sokuqala akusho ukuthi ezinye ezimbili zidlulile. Isabelo singabonakala kodwa senqabe ukubhala ngoba izimvume zekhombi zisho kanjalo.

Isabelo esikhawulelwe nge-valid users samukela kuphela ama-akhawunti noma amaqembu asohlwini. I-akhawunti ingaqinisekisa ngendlela efanele futhi isenqatshwe yilowo mugqa. Hlola incazelo yesabelo ngaphambi kokuphetha ngokuthi iphasiwedi ayilungile.

Ohlangothini lwesistimu yamafayela, kokubili inqubo ye-Samba nokubunikazi obuhleliwe kubalulekile. Ikhombi eliphethwe yi-root elinemodi engu-700 ngeke lamukele ukubhala okuvela ku-akhawunti evamile ngisho incazelo yesabelo iyivuma. Zama ngokufunda, bese ngokubhala, kukhombi okufanele i-akhawunti ilisebenzise.

Hlanza isikhathi esingqubuzanayo ngaphandle kokwephula inqubomgomo

Uma imbangela iyisikhathi esidala, vala lolo xhumano olulodwa bese uhlela futhi nge-akhawunti ehlosiwe. Uma isimo sokufakazela esigciniwe siqhubeka sibuya, susa leso simo esikhundleni sohlu lwamadrayivu lonke. Bese uqinisekisa isikhathi esisha nge-net use.

Gcina ukusayina kwe-SMB, ukubethela kanye nenqubomgomo yama-akhawunti edingekayo. Iseva enqaba isikhathi esingasayiniwe noma esingabethelwe isebenzisa inqubomgomo, ayifundi iphasiwedi ngokungalungile, futhi ukuyenza buthaka ukuze ukuhlela kuphumelele kushintsha ukuphepha ngophawu.

Rekhoda igama leseva, indlela eqondile ye-akhawunti namalungelo esabelo nekhombi asebenzile. Uma kungenjalo umuntu olandelayo ohlela idrayivu uzozama ukungena nge-VPN kuqala, ngoba yizo izimo zokufakazela azisebenzise ukufinyelela inethiwekhi.