Vimba i-NetworkManager ukukhombisa iphasiwedi ye-VPN egciniwe
Buza ngaso sonke isikhathi, yinikeze isiqoqo sezinkinobho noma gcina ifayela lika-root kuphela. Ukukhetha ngakunye kunokuchayeka okuhlukile, futhi ifulegi lephasiwedi kufanele lihambisane nakho.
I-NetworkManager ingagcina iphasiwedi ye-VPN ukuze uxhumano lukhuphuke ngaphandle kokuthi othile ayithayiphe, futhi ingaphinda ikhombise lelo nani ngohlelo lokuhlela noma nge-nmcli --show-secrets. Kunezimo ezintathu zobunikazi, futhi ukuziphatha kokukhombisa kuwuphawu nje lalokho okukhethile. Khetha imodeli kuqala, bese usetha ifulegi elihambisana nayo, esikhundleni sokufihla inkambu ngesibambi-sikhala esizodida umuntu olandelayo.
Izimo ezintathu zobunikazi
Imodeli yokuqala ibuza ngaso sonke isikhathi. Akukho okugciniwe, imfihlo ikhona ngesikhathi sokuqalisa kuphela, futhi noma ubani oqala uxhumano kufanele azi iphasiwedi. Yilokho okungewona okulula kakhulu futhi kulula ukuvikela.
Eyesibili inikeza imfihlo esiqoqweni sezinkinobho esiphethwe umsebenzisi. I-ejenti iyavuleka lapho iseshini iqala futhi ihlinzeka ngenani lapho iceliwe, okugcina lide kude nefayela lokuxhumana kodwa kuxhumanisa uxhumano neshini yalowo msebenzisi. Kulokhu kuza imibandela emibili: i-ejenti kufanele ibe isebenza, futhi kufanele ibe ivuliwe.
Eyesithathu igcina ubufakazi obuvikelwe boxhumano lwesistimu. Ihlala ngisho nangemva kokuqalisa kabusha futhi isebenza ngaphambi kokuthi noma ubani angene, futhi esikhundleni salokho inani lihlala kudiski livikelwe yimvume yefayela, hhayi ngokubethela.
Imodeli ngayinye inengqondo esimweni esifanele. Iphutha ukuwaxuba, futhi yileyo ndlela ikhompyutha ephathekayo ephetha ngemfihlo ezindaweni ezimbili futhi ingekho impendulo ecacile yokuthi iyiphi enegunya. Bhala ukuthi iphrofayela isebenzisa imuphi umfuziselo. Umugqa owodwa encwadini yeqembu usindisa umuntu olandelayo ekusunguleni indawo yesine yokubheka.
Funda isimo samanje ngaphambi kokushintsha
Bheka iphrofayela kanye nesimo semfihlo njengomsebenzisi ophethe uxhumano. Umyalo wesibili yiwo otshela ukuthi inani liyafundeka ngempela yini.
nmcli connection show "Office VPN"
nmcli --show-secrets connection show "Office VPN"
sudo stat -c '%U %a %n' /etc/NetworkManager/system-connections/*.nmconnectionIfayela likhiye kuleyo ndawo ngokuvamile lingelika-root futhi linemodi engu-600. Lokhu kubeka ngaphandle abasebenzisi abajwayelekile futhi akubeki i-root ngaphandle, okubalulekile lapho umshini ofanayo wabiwe noma lapho ikhophi yokugcina isebenza njenge-root.
Imvume yefayela ingumngcele, hhayi ukubethela. Noma ubani ongafunda ifayela njenge-root unayo iphasiwedi ngombhalo ocacile. Lokho kuwukushintshana okwamukelekayo kuseva engabhekiwe futhi kubi esiteshini somsebenzi esabiwe. Ukukubhala kanye kuvimbela ingxoxo ende yokuthi inani livikelwe yini.
Inani ngalinye lefulegi lenzeni
Imfihlo ye-VPN inesici esithi flags, futhi amanani awacaci ngezinombolo kuphela.
| Value | Meaning | Practical effect |
|---|---|---|
| 0 | No special flag | Secret is typically saved with the connection |
| 1 | Agent-owned | A keyring or secret agent supplies it |
| 2 | Not saved | Prompted at each activation |
| 4 | Not required | Connection proceeds without asking |
Ukuziphatha kwangempela kuncike futhi kusengezo nasekutheni i-ejenti isebenza, ngakho thatha ithebula njengesivumelwano futhi ukuziphatha okubonwayo njengalokho okukuqinisekisayo. Inani elisebenza kudeskithophu eyodwa lingase liziphathe ngendlela ehlukile kuseva engenasheshini. Yikulo gekhe lapho iningi lamathikithi adidayo lihlala khona.
Setha isici ngokusobala esikhundleni sokufutha umugqa bese uthemba. Ifulegi elingekho akusona inqubomgomo, futhi isibuyekezo sokulandelayo sephakethe singaligcwalisa ngento obungayihlosile.
Vumelanisa imodeli nesikhathi uxhumano luqala ngaso
Uma uxhumano luqala kuphela ngesikhathi umsebenzisi engene, ubunikazi be-ejenti buhambisana kahle futhi bugcina imfihlo ngaphandle kwefayela. Uma luqala lapho kuqalwa, ngaphambi kokuba kube khona iseshini, i-ejenti ayikwazi ukukusiza.
Yiso sonke isinqumo semishini eminingi. Lokhu futhi kuchaza isigaba semibiko edidayo lapho uxhumano lusebenza ngokuhlanganyela kodwa lwehluleka ngemva kokuqalisa kabusha. Ifulegi alizange lishintshe; isimo esizungezile sashintsha.
Esimeni sokungabhekwa, impendulo esebenzayo ifayela elikhawulelwe elingelika-root noma umthombo wobufakazi ogunyaziwe. Ligcine ngaphandle kwephrofayela yokuxhumana uma leyo phrofayela ingase ithunyelwe noma ikopishwe komunye umshini.
Uma inani lalivele libonakala, lishintshe
Ukushintsha ifulegi akuthinti iphasiwedi ngokwayo. Inani elavela kusithombe-skrini, emlandweni we-shell, ebhokisini elithunyelwe kwabezekelo, noma efayeleni abanye abasebenzisi ababengalivula kufanele lithathwe njengelidaluliwe.
Lishintshe kuseva, bese ulungisa iklayenti futhi unqamule noma iyiphi iseshini eyaqinisekiswa ngeyakudala. Ukususa uxhumano lwasendaweni akuhoxisi lutho ngaphesheya, futhi yilokho abantu abakushiyayo.
Bese uyeka ukubeka iphasiwedi emugqeni womyalo. Ingena emlandweni we-shell futhi ingavela ohlwini lwezinqubo; sebenzisa isikhuthazo esisebenzisanayo noma i-ejenti.
Qinisekisa ngokuxhuma kabusha
Phinda umyalo owabonisa imfihlo bese uqinisekisa ukuthi inkambu ayisaphrintwa. Bese unqamula futhi uxhume kabusha, futhi uqalise kabusha uma uxhumano luqala ngokuzenzakalela, ngoba ukwehluleka okuthakazelisayo kuvela kuphela lapho isimo seseshini sishintsha.
Uma imfihlo isabonakala, enye iphrofayela noma enye i-ejenti iyinikezelayo. Hlola uxhumano olusebenzayo kanye nesiqoqo sezinkinobho esikhundleni sokususa amafayela kuze kube yilapho uphawu lusuka khona.