OpenVPN auth-nocache: okwenzekayo ekungeneni okulandelayo

Vula i-auth-nocache futhi isexwayiso sokugcina iphasiwedi kunqamuka, kanye nekhophi yezicelo zokufinyelela i-OpenVPN eyayizigcinile okokuxoxisana kabusha okulandelayo. Ukuthi lokho kuzophenduka umbuzo, umzamo ophindwayo ongenalutho noma umhubhe ophukile kuncike ekutheni izicelo zokufinyelela zivela kuphi okwesibili. Ngakho lokhu kuwukuqhathanisa phakathi kwezindlela zokusabalalisa, hhayi isinqumo ngalokhu kukhetha. Funda indlela oyisebenzisayo ngempela ngaphambi kokuhlela noma yiluphi iphrofayela.

Izicelo zokufinyelela zesibili kumele zivela kuphi

I-OpenVPN isebenzisa i-auth-nocache kuzimfihlo eziqoqwa yi-auth-user-pass ne-askpass: uma sezisetshenzisiwe, inqubo iyazilahla esikhundleni sokuzigcina okokuxhawulisana okulandelayo. Ukuxoxisana kabusha kufika ngesikhathi, ngokuzenzakalela kanye ngehora, ngakho isicelo sesibili sifika isikhathi eside ngemva kokuba umuntu othayiphe iphasiwedi esehambile. Leyo gebe yiwo wonke umlando. Uma inqolobane ishiywe ivuliwe, iklayenti lidlala ikhophi egciniwe ngaphandle kokubuza muntu; uma ivaliwe, kufanele ithole imfihlo kwenye indawo noma yehluleke.

Ngakho bhala yonke indawo okungavela kuyo imfihlo ngaleso sikhathi, futhi uthembeke mayelana nokuthi yiziphi kuzo ezikhona kusibungu. Umuntu oseceleni kwethemini, ifayela elingafundwa yi-auth-user-pass noma i-askpass, noma ithokheni yesikhathi esikhishwe yiseva yizona zintathu ezibalulekile lapha. Uma kungekho noyedwa wazo okhona, ukuxoxisana kabusha kuyahluleka ngemva kwehora kushintsho, hhayi ngaleso sikhathi owakwenza ngaso.

Izindlela ezintathu, izindawo ezintathu zokuhluleka

Iklayenti ledeskithophu elinomuntu phambi kwalo yicala elilula: umbuzo uyabuya, othile uphinda athayiphe iphasiwedi, futhi inani ukunaka. Isevisi, ikhontheyna noma irotha ehambisa i-OpenVPN ngaphandle kwethemini yicala elinzima, ngoba akekho ozophendula futhi ukuxhumana kabusha obekuthule ngaphambili manje kuqeda umhubhe. Ingxubevange ihlezi phakathi kwazo zombili futhi iziphatha njengecala ledeskithophu kuze kunyamalale isikhathi esingaphendula umbuzo. Okuzihlukanisayo akukhona ukuthi i-GUI ifakiwe, kodwa ukuthi umthombo wezicelo zokufinyelela ukhona ngesikhathi sokuxoxisana kabusha.

Hlanganisa ukusabalalisa kwakho ngenye yalezi zintathu ngaphambi kokushintsha noma yini, ngoba iseluleko osithola ku-inthanethi cishe sihlala sibhalelwe eyokuqala. Ukusebenzisa impendulo yedeskithophu kusevisi engenathemini yiyo indlela umhubhe osebenze izinyanga oqala ngayo ukuwa njalo ngehora.

Umyalelo noma ifulegi: khetha okukodwa futhi wazi ukuthi usebenzise okukuphi

Ngaphakathi kwephrofayela, i-auth-nocache iwumugqa wayo; ekubizeni okusho ngokucacile iphrofayela, iyifulegi kulo mugqa womyalo, futhi incwadi ye-OpenVPN ibala zombili izindlela. Zombili zenza into efanayo ekugcineni izicelo zokufinyelela, futhi akukho neyodwa ethinta uhlobo lwesixhumi noma ilungisa isexwayiso esingahlobene kuyo leyo logi. Umehluko ukuqina: ifulegi lihlanganisa lokho kusebenza kuphela, ngakho isevisi eqalwa kabusha kusukela kufayela le-unit noma kuskripthi sokugoqa ngeke ibe nalo ngaphandle uma isigoqi silidlulisela futhi.

auth-nocache
openvpn --config /path/client.ovpn --auth-nocache

Nquma ukuthi iyiphi into ephethe isilungiselelo, siyishintshe lapho hhayi kwenye indawo. Iphrofayela ehlelwe kukhompyutha ephathwayo kanye ne-unit ye-systemd eyidlulayo ngefulegi yizona ezimbili ezikhiqiza ukuziphatha okungqubuzanayo ngemva kokuqalisa kabusha.

Ifayela lezicelo zokufinyelela lihambisa imfihlo esikhundleni sokuyisusa

Ukuqondisa i-auth-user-pass efayeleni kunikeza ukuxoxisana kabusha ngakunye okulandelayo umthombo, futhi kubeka iphasiwedi endaweni esinda ekuqaliseni kabusha. Buza ukuthi ubani ongafunda lelo fayela, ingabe idemoni isengalifunda ngemva kokuyeka amalungelo, nokuthi kwenzekani uma uhlelo lwamafayela lufakwe ngokufunda kuphela noma umbono wekhontheyna ufihla indlela. Imfihlo ediski kanye nemfihlo ememorini kuyizinkinga ezihlukene, futhi ukuxazulula enye kushiya enye endaweni yayo. Ukujikeleza yisinyathelo esidlulwayo: iphasiwedi eshintshiwe kuseva kodwa hhayi efayeleni ikhiqiza ukuhluleka okufundwa njengokonakala kwenethiwekhi.

Gcina ifayela liphethwe yi-akhawunti ehambisa idemoni, lingafundeki yinoma ubani omunye, futhi lingaphandle kwezipele eziyekayo ezishiya isibungu. Inketho ye-OpenVPN yohlangothi lweseva i-auth-gen-token inikeza iklayenti ithokheni yesikhathi ngemva kokungena okuphumelelayo, okuyinto encane okumele ishiywe izulazule kunephasiwedi ye-akhawunti. Bhala isinyathelo sokujikeleza eceleni kwefayela noma kunganjani, ngoba ifayela ngokuvamile liphila isikhathi eside kunomuntu elalifaka.

Ukunweba ukuxoxisana kabusha kuhambisa izindleko, akukususi

Esinye isiphakamiso ukukhulisa i-reneg-sec kuze kube umbuzo uyivelakancane ngokwanele ukuba ungawunaki. Lokho kubhala kabusha uhlelo lokujikeleza kokhiye kwesikhathi futhi kusunduza leyo nkinga yezicelo zokufinyelela esikhathini esingemuva, esingalindelekile; akudali umthombo wezicelo zokufinyelela. Inqubomgomo evuselela okhiye ngokohlelo ngesizathu ethile akufanele ikhululwe ukuze kugwenywe ukuthayipha iphasiwedi kuphela.

Hlola ukuxhumana kabusha hhayi isikhathi ohlezi kuso, ngoba isikhathi esiphilayo asifakazeli lutho. Wisa umhubhe ohlangothini lweseva, noma qalisa kabusha isevisi yeklayenti, futhi ubuke ukuthi ukuxoxisana kabusha okulandelayo kwenzani uma kungekho muntu kukhibhodi. Uma ixhumana futhi, shono indlela enikeze imfihlo; uma ingaxhumani, uthole izindleko zangempela zenketho kulesi sibungu. Noma yimuphi umphumela ukunikeza impendulo eqhubeka ngesikhathi sokuphazamiseka esikhundleni yaleyo eyaqhubeka ngesikhathi sokuhlolwa.

Emkhakheni ophethwe, umnikazi wokusabalalisa kufanele akwazi ukusho izinto ezintathu: izicelo zokufinyelela zivela kuphi, zigcinwa kuphi, futhi ubani ozijikelezayo. Uma noma iyiphi yalezo zimpendulo ingumuntu owamisa isibungu, inketho ayikaphephile lapho.