Imoduli ye-PAM ayaziwa: iyiphi inqubo ehlulekile ngempela
Umlayezo usho into ehlanganyelwe nendawo yokungena, hhayi iphasiwedi. Thola inqubo eyikugcinile, bese uhlola ukulayisha, izimpawu kanye neziqinisekiso zesitaki.
Funda lowo musho njengesitatimende mayelana nento ehlanganyelwe nesikhombi somsebenzi, hhayi mayelana nephasiwedi. Amagama afanayo angavela ku-OpenVPN plugin, kusitaki se-PAM esilayishwe isevisi eyodwa noma ngaphakathi kwe-daemon ye-RADIUS, futhi lezi zinto ezintathu zokuphenya ezihlukene. Qala ngokuthola inqubo.
Izinhlolovo ezingezansi zicabanga ukuthi umlayezo wavela ngokuxhumana kwe-Linux-PAM lapho kungena i-VPN. Uma uvela ekulungiselelweni kweseva ye-RADIUS uqobo, qala ngobufakazi balezo daemon.
Shono inqubo ngaphambi kokusho iphakethe
Izingxenye ezintathu zibizwa ngokuthi imoduli futhi azikho ezishintshanayo. Isengezo sokugunyaza se-OpenVPN silayishwa i-daemon ye-VPN futhi sisebenzisa isixhumanisi sokubuyisa salezo daemon. Imoduli ye-PAM iyinto ehlanganyelwe elayishwa i-libpam yesevisi enegama, futhi esebenzisa izindawo zokungena ezifana pam_sm_authenticate. Imoduli ye-FreeRADIUS iyingxenye yokulungiselelwa kwalezo daemon uqobo. Umlayezo onamagama afanayo ungavela kunoma yikuphi kwalaba abathathu, ngakho umbuzo wokuqala ukuthi yimuphi umugqa welogi owukhiqizile.
Hlanganisa isigxivizo sesikhathi somzamo owodwa ohlulekile phakathi kwelogi ye-VPN nelogi yokuqinisekisa yesistimu, bese ufunda imigqa engaphambi kwesifinyezo. Umlayezo oqondile wesilayishi uvame ukuba khona vele.
Funda iphutha lokulayisha, bese kuba yindawo yokungena
I-PAM ibika imoduli engaziwa lapho ingakwazi ukulayisha into ehlanganyelwe ekhethiwe, noma lapho into elayishiwe ingayinikezi imisebenzi edingwa yilowo mugqa wesitaki. Lezi ziyizilungiso ezihlukene: eyokuqala inkinga yendlela, ukupakisha noma i-ABI, kanti eyesibili iyindawo yokungena engahambisani. Umugqa wokugunyaza udinga pam_sm_authenticate kuyilapho umugqa we-akhawunti udinga pam_sm_acct_mgmt, futhi umtapo wolwazi osebenzisa owodwa kuphela uzohluleka kwesinye, njengoba ikhodi yesithumeli ikhombisa. Ukuthola ifayela kudiski akufakazeli kokubili.
Ukuthatha umtapo wolwazi onegama elifanayo kwelinye isabelo noma ukwakheka kwe-CPU akusona isilungiso, futhi kungase kushiye inqubo ilayisha imoduli engakaze ihlolwe ne-libpam yayo. Hlola iphakethe eliphethe indlela ehlosiwe kanye nokwakheka kwangempela kwefayela ngaphambi kokushintsha noma yini.
Gcina iziqinisekiso ebezinikezwa isitaki
Indlela eshesha kakhulu yokuthulisa leli phutha futhi iyona embi kakhulu: ukumaka imoduli edingekayo njengokuzikhethela, susa isigaba se-akhawunti, noma ufake imvume engenamibandela. Ngayinye yalezi iguqula uhlolo oluhlulekile lube uhlolo olungekho, futhi ukungena ke kuyaphumelela ngezizathu okungekho owayezihlosile. Ukusetha kabusha iphasiwedi nokushintsha imfihlo eyabiwe nakho akunikezi umsebenzi ongekho, ngoba ukwehluleka kwenzeka ngaphambi kokuba noma yibuphi ubufakazi bufike ku-backend.
Isitaki semoduli eziningi kungenzeka sasebenzisa enye i-backend ngaphambi komugqa ohlulekile, ngakho iphutha alifakazeli ukuthi asikho isicelo se-RADIUS esathunyelwa.
Qinisekisa ukungena, hhayi imoduli
Lapho ukungahambisani sekulungisiwe, hlola indlela yangempela yokwamukela. I-akhawunti evumelekile kufanele idlule, ubufakazi obungalungile kufanele buqhubeke buhluleka, futhi i-akhawunti evinjiwe kufanele iqhubeke yenqatshwa. Qinisekisa futhi ukuthi noma yisiphi isidingo sesitifiketi noma isici esengeziwe sisasebenza, ngoba isitaki esilungisiwe eseqa isigaba sibonakala njengempumelelo ohlangothini lweklayenti.
Imoduli ukulayisha ngokuhlanzekile kuyinqubekela phambili, hhayi uhlolo oluphelile.
Bhala igama lesevisi, amafayela wenqubomgomo kanye nezindawo zokungena ezathintekayo, kanye nomzamo owodwa owusebenzise njengobufakazi. Lowo mbhalo yiwo owenza isigameko esilandelayo sibe ukusesha esikhundleni sokuzijwayeza kwezinto zakudala.