Ukulungisa: i-OpenVPN ayikwazanga ukufunda igama lomsebenzisi le-Auth kusuka kokokufaka okujwayelekile

could not read Auth username from stdin kubonakala njengenkinga yokuqinisekisa futhi akunjalo. I-OpenVPN izamile ukubuza igama lomsebenzisi kokokufaka okujwayelekile, ayitholanga lutho olufundekayo futhi yama ngaphambi kokuxhumana neseva. I-akhawunti ingase isebenze ngokuphelele; inqubo ayinamuntu wokubuza.

Ngakho-ke isinyathelo sokuqala esiwusizo ukuqinisekisa ukuthi iklayenti lifunda ini, hhayi ukuzama kabusha ukuxhumana noma ukushintsha izilungiselelo ohlangothini lweseva. Landela izinhlolo ezilandelayo ngokulandelana futhi ume kwelokuqala elihlulekayo.

Funda iphutha njengokwehluleka kokokufaka kwasendaweni

Lapho auth-user-pass ibonakala ngaphandle kwengxabano yefayela, iklayenti lilindele ukubuza. Ku-shell esebenzisanayo lowo mbuzo uyasebenza ngoba inqubo inayo itheminali. Ngaphansi kwe-systemd, umsebenzi we-cron noma i-container, okokufaka okujwayelekile kuvame ukungenalutho, futhi ukufunda kubuyela ngokushesha nephutha olibonayo.

Umlayezo uphinde usho inkambu ehlulekile, igama lomsebenzisi noma iphasiwedi, okubonisa ukuthi ukufunda kufike kude kangakanani. Igama lomsebenzisi elingekho lisho ukuthi inqubo ayikwazanga ukufunda lutho nhlobo. Iphasiwedi engekho ngemuva kwegama lomsebenzisi eliphumelelayo isho ukuthi ukugeleza kokokufaka kuphelile phakathi kokufunda okubili, okuyinto evamile kufayela elibhalwe ingxenye noma ipayipi elivaliwe.

Qinisekisa umbono weklayenti ngokwalo ngaphambi kokushintsha enye into. Liqalise ngaphambili ngokucushwa okufanayo nomsebenzisi ofanayo, futhi ubheke ukuthi umbuzo uyavela yini. Uma uvela ku-shell yakho kodwa hhayi ngaphansi komphathi wensizakalo, umehluko usemthonjeni wokokufaka, hhayi emininingwaneni yokungena. Ukuqhathanisa okusheshayo kwefayela le-unit nendawo ye-shell yakho kuvame ukubonisa ukuthi iyiphi enikeza itheminali.

Nikeza insizakalo umthombo wemininingwane yokungena osekelwayo

Umthombo osekelwayo wokusebenza ngaphandle kokuqapha ifayela lemininingwane yokungena elidluliswa njengengxabano ku- auth-user-pass. Ifayela lifundwa njengombhalo ojwayelekile: umugqa wokuqala igama lomsebenzisi, owesibili iphasiwedi. Khomba kulo ngephenduli ephelele njenge- /etc/openvpn/client/creds , ukuze isiqondisi sokusebenza se-akhawunti yensizakalo singakwazi ukushintsha incazelo yomyalelo.

Izimvume zibalulekile njengephenduli. Ifayela kufanele lifundeke i-akhawunti eqhuba iklayenti hhayi wonke umuntu omunye, futhi kufanele liphethwe yi-akhawunti yensizakalo noma i-root eneqembu elihlanganisa insizakalo. Hlola ukufundeka njengaleya akhawunti, ngaphandle kokuphrinta okuqukethwe.

Iphenduli elihlobene iyindlela yokwehluleka ethule. Iphrofayela ingase ibe kusiqondisi esisodwa kuyilapho i-systemd iqalisa inqubo kwenye indawo, ngakho-ke ifayela elixazululwa ku-shell yakho alixazululwa ensizakalweni. Hambisa imininingwane yokungena endaweni eqinile futhi yikhombe ngokuphelele. Bese uqalisa insizakalo kanye futhi uqinisekise ukuthi kusetshenziswa iphenduli elifanayo, esikhundleni sokuthemba umbono womhleli wephrofayela.

Uma ukusetshenziswa kudinga ikhodi yesikhathi esisodwa noma enye inselelo esebenzisanayo, ncika ukuthi uhlelo lokusebenza leklayenti liyisekela ngempela ngaphandle kokuqapha. Ifayela elinephasiwedi engashintshi alikwazi ukuphendula ikhodi ejikelezayo, futhi ukuphinda umbuzo ongaphenduleki akwengezi ulwazi.

Kungani i-script-security ingeke isize

script-security ilawula ukuthi iklayenti lingenza imibhalo yokusebenza futhi lingayidlulisela malini, kuhlanganise nokuthi iphasiwedi inganikezwa umbhalo ngokusebenzisa okuguquguqukayo kwendawo. Akusho lutho mayelana nokuthi igama lomsebenzisi nephasiwedi kuqhamuka kuphi ekuqaleni.

Ukulikhuphula ezingeni eliphezulu kuwukusabela okuvamile ngoba umlayezo ukhuluma nge-Auth, kodwa kushintsha izimvume zemibhalo hhayi umthombo wokokufaka, futhi kwandisa lokho iklayenti elingakwenza. Uma umbhalo osizayo uyingxenye yomklamo, lungisa kuqala umthombo wokokufaka futhi ugcine izinga lokuphepha kunani eliphansi elidingwa ukusetshenziswa.

Isixhumanisi sokuphatha siyindlela esemthethweni. I-frontend ingaxhumana naso, ithole isicelo semininingwane yokungena futhi iphendule ngegama lomsebenzisi nephasiwedi, yileyo ndlela amanye ama-GUI asebenza ngayo. Uma uyisebenzisa, yihlanganise nekheli lendawo, yivikele ngefayela lephasiwedi lokuphatha futhi ukhawulele ukuthi ubani angaxhumana, ngoba iyisiteshi sokulawula seklayenti.

Qinisekisa isigaba esilandelayo ngemuva kokuthi iklayenti lifunde ifayela

Lapho iklayenti selikwazi ukufunda imininingwane yokungena, ukwehluleka okulandelayo ukuhwebelana kwangempela neseva, futhi umlayezo wayo unencazelo ehlukile. Ukwehluleka kokuqinisekisa kuleso sigaba kusho ukuthi iseva yenqabile i-akhawunti; impendulo yenselelo isho ukuthi iseva ifuna enye into. Zithathe njengezinkinga ezintsha hhayi njengokuphindwa kwale nkinga.

Hlola yonke indlela ngendlela insizakalo ezoyisebenzisa ngayo: i-akhawunti efanayo, isiqondisi sokusebenza esifanayo, indawo ye-unit efanayo. Ukuxhumana okusebenza kuphela uma kuqalwa ku-shell yakho kuwuphawu lokuthi okuguquguqukayo kwendawo noma itheminali kuseyingxenye yokugeleza.

Bese ugcina izimfihlo endaweni ezifanele. Amaphasiwedi ezingxabanweni zomugqa womyalelo avela kuthebula lezinqubo, namaphasiwedi akukhipha kokulungisa amaphutha agcina esemathikithini. Sebenzisa ifayela elivikelwe noma isixhumanisi sokuphatha, gcina amarekhodi ezingeni elingaphindi imininingwane yokungena, futhi ujikelezise ifayela lapho kunomuntu onokufinyelela ohambayo.

Uhlu lokuhlola: iphenduli eliphelele lemininingwane yokungena, lifundeka njenge-akhawunti yensizakalo, itheminali ayidingeki, i-script-security ishiywe emkhawulweni wayo ophansi, isixhumanisi sokuphatha kuphela uma sihlanganisiwe futhi siqinisekisiwe, futhi impendulo yeseva evelayo ithathwa njengesigameko esihlukile.