Isicelo se-TOTP se-OpenConnect asikho ku-NetworkManager: izinhlolo ezine

Igesi lamukela iphasiwedi, licela ikhodi, futhi ingxoxo ayinikezi nsimu yayo. Akukho okuthayiphiwe kabi: ingxenye ye-NetworkManager iqedile ukushintshana kwemfihlo ngaphandle kokucela inani lamadijithi ayisithupha. Landela izinhlolo ezine ngezansi ngokulandelana, ngoba eyodwa kuphela yazo eshintsha iklayenti. Uhlu olusele lukhipha igesi, i-akhawunti kanye nokwakhiwa kwengxenye.

Uhlolo lokuqala: funda lapho ukuqinisekiswa kuma khona

Iphasiwedi engalungile yehluleka ngokushesha. Isici sesibili esingekho sehluleka ngemuva kwesinyathelo sobufakazi, ngokuvamile ngokucela okuphindwayo noma isikhathi siphela ohlangothini lwegesi. Isikhathi kanye nelogi yegesi kukhombisa ukuthi imuphi umjikelezo oshiywe ungenampendulo.

Funda ilogi yokuxhumana ngaphambi kokuthinta iphrofayili. Uma igesi libika ukuqinisekiswa okungaphelele noma inselele ephelelwe yisikhathi, iklayenti alizange liyithumele ikhodi. Uma libika ubufakazi obungavumelekile, inkinga yiphasiwedi futhi asikho isethingi ye-TOTP esizoyilungisa.

Qaphela ukulandelana okuqondile kwezicelo igesi elikulindele: igama lomsebenzisi, iphasiwedi, bese kuba ikhodi, noma igama lomsebenzisi, ikhodi, bese kuba iphasiwedi. Amanye amagesi ahlela kabusha imijikelezo, futhi iklayenti elazi ukulandelana kokuqala kuphela lizokhahlela kwesibili.

Uhlolo lwesibili: sebenzisa iklayenti eliphethe inselele

I-OpenConnect ngokwayo isebenzisa yonke ingxoxo, kuhlanganise nomjikelezo wenselele. Ukuyisebenzisa ngokuqondile iyona ndlela elindelekile kakhulu yokuqinisekisa ukuthi i-akhawunti negesi ziyasebenza:

sudo openconnect --protocol=anyconnect --useragent=AnyConnect vpn.example.net

Iklayenti libuza ngokulandelana igesi elibuza ngakho. I-ejenti yomsebenzisi ibalulekile ngoba amanye amagesi alungisa ukugeleza kokungena ukuze kuhambisane neklayenti elaziwayo, futhi umucu ojwayelekile ungaveza ukugeleza okufushane okungakaze kucela ikhodi. Yisebenzise kanye phambi kwamehlo ngaphambi kokuhlela noma iyiphi insizakalo yangemuva.

Uma umugqa womyalo ubuza ngendlela efanele, i-akhawunti, igesi kanye nesici sesibili kuhle. Inkinga esele ingxoxo yengxenye, hhayi insizakalo yokuqinisekisa. Lokho kuhlukanisa ingxenye ehlulekayo ngaphandle kokuthinta iseva. Gcina umphumela womyalo kanye nerekhodi lesigameko.

Uma nomugqa womyalo weqa isicelo, ma ube yimile futhi uhlole ukucushwa kwegesi kanye nomnikazi walo. Alikho iklayenti ledeskithophu elingaphendula inselele iseva engakaze iyithumele.

Uhlolo lwesithathu: bheka ukuthi ingxenye yakho inikeza imodi ye-TOTP yini

Amanye amakhiwo e-NetworkManager OpenConnect anikeza imodi yetokheni kanye nensimu ye-ejenti yomsebenzisi kuthebhu ye-Identity yokuxhumana. Setha i-ejenti yomsebenzisi kunani igesi elikulindele, khetha ukufakwa kwe-TOTP ngesandla bese ugcina ukuxhumana.

Ukuthi lezo zinsimu zikhona yini kuncike kunguqulo yengxenye kanye nokuthi ideskithophu isebenzisa muphi umhleli wokuxhumana. Umhleli ozimela angabonisa izinketho ezifihlwa ipaneli ye-GNOME, noma okuphambene. Hlola inguqulo yephakethe efakiwe ngaphambi kokufuna isethingi efihliwe.

Uma imodi yetokheni ikhona futhi isicelo singabonakali, ukwakhiwa akunakho ukudluliswa kwenselele phakathi kwengxenye nengxoxo evamile yezimfihlo. Ukuphinda uthayiphe iphasiwedi, ukuphinda ufake iphakethe elifanayo noma ukuhlanza iringi yokhiye ngeke kwakhe insimu engayisebenzisanga ukwakhiwa.

Uhlolo lwesine: thatha ikhodi ekhiqiziwe njengokuyekelela

Isikripthi singashayela i-oathtool yekhodi yamanje futhi sidlulise igama lomsebenzisi, iphasiwedi kanye nekhodi ku-nmcli connection up --ask. Ukulandelana kuyasebenza, kodwa imfihlo eyabiwe igcina isigcinwe endaweni engafundwa yinoma ubani ongavula isikripthi, futhi lowo mfundi angakha amakhodi unomphela. Lokho kukhulisa unomphela indawo yobufakazi, hhayi ukulungiswa kweklayenti.

Noma ubani okhetha lokhu kufanele akhiye ifayela lemfihlo ku-root, agcine amanani akhiwe ngaphandle komlando we-shell futhi athathe isikripthi njengempahla yobufakazi. Isembozo esiphindayo ikhodi kumatheminali silahla isici sesibili. Qala uhlole isembozo nge-akhawunti esetshenziswa kanye.

Isikripthi kufanele futhi silandele ukulandelana kwezicelo kwegesi. Uma iseva icela ikhodi ngaphambi kwephasiwedi, ukulandelana kokufaka okungaguquki kuthumela inani elingalungile esicelweni esingalungile futhi kukhiqiza ukuqinisekiswa okungaphelele okufanayo. Zijwayeze nge-akhawunti yokuhlola ngaphambi kokuxhuma emsebenzini wokungena.

Qinisekisa igesi ne-akhawunti efanayo

Hlola zonke izixazululo zokugwema kugesi elifanayo, i-akhawunti efanayo kanye neqembu lomhubhe elifanayo. Igesi elidinga nesitifiketi sedivayisi linganqaba iklayenti lomugqa womyalo ngesizathu esingahlobene ne-TOTP, futhi ukulandelana kwezicelo kungahluka kulokho okuzijwayezile.

Rekhoda iklayenti, inguqulo yalo, i-ejenti yomsebenzisi kanye nokulandelana kwezicelo okusebenzile. Lelo rekhodi litshela umuntu olandelayo ukuthi inkinga isekwakhiweni kwengxenye, ekugelezeni kwegesi noma kunqubomgomo ye-akhawunti, ngaphandle komjikelezo wokuhlela kabusha iphasiwedi.

Qeda ngokuxhuma kabusha kanye ngemuva kokuphuma ngokuphelele. Imfihlo egcinwe kukhashi ingenza ukugeleza okugabukile kubonakale kulungisiwe kuze kube isikhathi esilandelayo, futhi kusekuxhumaneni kwesibili lapho isicelo esingekho sivame ukubuya.