I-OpenVPN ifunda iphasiwedi kusuka kutheminali, hhayi ku-stdin

OpenVPN icela igama lomsebenzisi nephasiwedi kutheminali elawulayo, futhi ifayela eliqondiswe kukokufakwayo okujwayelekile akulona lelo theminali. Lolu datha olulodwa luchaza umscript olenga ngenkathi iphasiwedi likhona lapho epayipini. Ikhasi lokucela lidwetshwa yiklayenti futhi ukufundwa kwenzeka kudivayisi yetheminali, ngakho ukuhambisa i-stdin akushintshi lutho. Phakela iklayenti ngenye yezindlela zayo zokufaka ezibhalwe phansi futhi lowo mscript uzoxhuma ngomzamo wokuqala.

Izindlela ezintathu zihlanganisa cishe zonke izimo, futhi ngayinye yehluleka ngendlela yayo. Khetha ngokwesicelo iklayenti elisikhombisa ngempela, hhayi ngokwenketho okulula kakhulu ukuyibhala kumscript.

Isicelo asiveli ku-stdin

Lapho i-OpenVPN idinga ubufakazi, ivula itheminali elawulayo futhi ifunda lapho. Yingakho ukuhlola okusebenzisanayo kubonakala kuhle ngenkathi umyalo ofanayo ngaphansi kwe-cron noma ifayela le-unit umile ngaphandle kokunyakaza nesicelo esibhalwe kuloja okungekho muntu oyibukayo. Amanye amabhilidi abuyela kukokufakwayo okujwayelekile lapho kungekho theminali, futhi lokho kungafani kubi kakhulu kunokwehluleka okuqinile, ngoba kufihla inkinga kuze kufike ukusetshenziswa.

Hlola indawo ngaphambi kokubhala noma iyiphi ikhodi: sebenzisa iklayenti ngaphansi komsebenzisi ofanayo, nge-stdin efanayo, njengoba kuzokwenza isihleli noma umphathi wesevisi. Uma isicelo singaveli kuloja futhi inqubo ingaqhubeki, kukhona okulindele itheminali engekho.

Indlela yokuqala: ifayela lobufakazi elinemigqa emibili

Inketho yokuqinisekisa ithatha indlela, futhi ifayela linemigqa emibili ngqo, igama lomsebenzisi bese kuba iphasiwedi, akukho okunye. Nikeza indlela ngokucacile esikhundleni sokuthembela egameni lefayela elijwayelekile, ngoba ifayela lobufakazi elilahlekile kudirekhithori yomsebenzi yilona ndlela i-akhawunti engalungile efika ngayo ekusetshenzisweni. Setha imodi ku-0600 futhi unikeze ubunikazi ku-akhawunti esebenzisa iklayenti.

Iklayenti lifunda lelo fayela kanye kuphela ekusunguleni, ngakho ukushintsha iphasiwedi kusho ukuqala kabusha inqubo. Imvamisa lokho ukuziphatha okufunayo, futhi kufanele kube ku-runbook eceleni kwenqubo yokushintsha.

Indlela yesibili: askpass yomusho wokuvula wokhiye

Ukhiye wangasese ovikelwe ngomusho wokuvula uveza isicelo sesibili esihlukile, futhi sinesisombululo saso esisekelwe efayeleni: inketho ye-askpass ifunda umusho emugqeni wokuqala wefayela. Emhubheni osekelwe ku-SSH okulingana nakho uhlelo lwe-askpass olusebenziswa yiklayenti, futhi okukhiphayo okuvamile kuba yimfihlo.

Azikho izinhlobo ezimbili ezifaka imfihlo ohlwini lwezimpikiswano, futhi zombili ziyayeka ibe khona njengefayela noma njengohlelo olusebenzekayo oluyiphrinta. Ukuvikelwa yizimvume zefayela nobunikazi benqubo, hhayi ukufihlakala. Umsizi ophindayo umucu obhalwe ekhodini uyimfihlo enezinyathelo ezengeziwe.

Indlela yesithathu: i-CLI yeklayenti lesango ngokwayo

Amaklayenti ebhizinisi avamise ukunikeza indawo yokungena yomugqa womyalo exhuma esangweni eliqanjiwe ngaphandle kwefasitela, futhi yilowo oyindlela esekelwayo. Ku-Linux iklayenti le-GlobalProtect liveza imisebenzi yokuxhuma nokungenisa isitifiketi nge-CLI yalo, futhi amasango asebenzisa ukuqinisekisa ngesitifiketi adinga inyathelo lokungenisa ngaphambi kokuba ukuxhuma okuzenzakalelayo kusebenze. Khetha lokho kunezikhathi zokucindezela izinkinobho ezenziwe, ngoba uthola isimo sokuphuma sangempela, awuncikile ekugxileni kwefasitela, futhi kuyasinda esikrinini esikhiyiwe.

Uma ukuxhuma kokuqala kusadinga umuntu ukwamukela isitifiketi, ukuzenzakalisa akukapheli. Yenza ukungenisa ngesikhathi sokusetha futhi ukubhale njengombandela wangaphambili.

Lapho ukugeleza kudinga i-pseudo-terminal

Uchungechunge olucela iphasiwedi bese lucela ikhodi esetshenziswa kanye alinayo ifayela elilodwa elingafundwa. Umshayeli wetheminali njenge-Expect iyithuluzi elifanele ngoba ilinda iphethini ngayinye ngokulandelana, futhi idinga inqubo esiqaliwe ngaphambi kokuba ikwazi ukufanisa noma yini.

Ukwehluleka okubili kudla ubukhulu. Umscript olinda isicelo ngaphandle kokuqalisa iklayenti ulinda ingunaphakade, futhi i-Tcl ayilona ishelu, ngakho izibalo zeshelu ezibhalwe ngaphakathi kwebhulokhi ye-expect azihlolwa njengoba zifundwa. Gcina ifulegi lokuhlola livuliwe ngenkathi wakha amaphethini, bese uyicisha.

Izimfihlo ezivuzayo, nokuthi zicasha kuphi

Noma yini edluliswa njengempikiswano iyabonakala ohlwini lwezinqubo, ngakho ubufakazi kufanele bube sefayeleni noma ngemuva komsizi, hhayi emugqeni womyalo nanini. Amakhodi asetshenziswa kanye asetshenziswa ngokomklamo futhi kufanele akhiqizwe kumzamo ngamunye. Amalogi okwehluleka avamise ukuthwala igama lomsebenzisi futhi kwesinye isikhathi nokunye, ngakho kususa imininingwane ngaphambi kokuwathumela noma kuphi, futhi gcina imfihlo ngaphandle kwephrofayela uqobo, ngoba ifayela lokumisa elinephasiwedi elishumekiwe linanyatheliswa kumathikithi nakumarekhodi. Ukushintsha i-akhawunti bese kusho ukuzingela ikhophi ngayinye, futhi yileyosindleko okuyiyo le nhlangano eyigwemayo.

Hlola izindlela ozikhethile, bese uzixhumanisa nefayela le-unit noma isihleli esizosebenzisa iklayenti ngempela. Umhubhe uphila isikhathi esilingana nokuphila kwale yo inqubo.