I-RDP ishintsha iklayenti: kungani isizindalwazi sibona enye ihosti

Umthetho wakho we-VPN wenqaba isizindalwazi futhi ithikithi livalwa njengokonakala kwe-firewall, kuyilapho lowo msebenzisi efungula ideskithophu eshicilelwe futhi ebuza kuleso sizindalwazi ngaphandle kwenkinga. Zombili izitatimende ziyiqiniso. Ideskithophu ingenye iklayenti, inekheli layo esigabeni esethenjwa yimithetho, futhi inobumqondofana bayo lapho ixhumana phambili. Okubonakala njengomthetho ophikisanayo ngokuvamile isicelo sesibili okungekho ocabangile ukusifaka ekubuyekezweni.

Isicelo sesibili sinekheli lalo leklayenti

Lapho uhlelo olungaphakathi kweseshini luvula ukuxhumana nesizindalwazi, ukuxhawulana kwe-TCP kuqala kuhosti yeseshini. Ikheli lalo lomthombo lingelase-network yaleyo hosti, ngakho wonke umzila kanye ne-firewall yesizindalwazi endleleni kuhlola isigaba sedeskithophu hhayi ichibi lamathumbu okwavela kulo ilaptop yakho. Ikheli le-VPN alibonakali nhlobo kulowo mgudu. Yikho umthetho wokwenqaba osuselwa emthonjeni ungaba uqinisile futhi ungahlobene ngesikhathi esisodwa.

Funda umsuka ngaphakathi kweseshini hhayi elaptop, bese uhlola indlela eqhubekayo kusuka endaweni efanayo. Izimpendulo ezimbili kufanele zivumelane ngokuthi iyiphi ihosti eyenza isicelo.

whoami
ipconfig /all
Test-NetConnection db01.corp.internal -Port 5432

Qhathanisa lokho okubikwa yiseshini nekheli elirekhodwe yisizindalwazi ngawo lowo mzuzu. Lapho ilogi yeseva ikhombisa i-subnet yedeskithophu hhayi ichibi lamathumbu, umbuzo uyeka ukuba ngukuthi umthetho wasebenza yini futhi uba ngukuthi iyiphi ihosti eyenze isicelo. Lokho kungophenyo olunye nomnikazi omunye.

Ubumqondofana buguquka kanye nekheli

Ukuxhumana okuqhubekayo ngokuvamile kuqinisekisa njengethokheni yeseshini, imininingwane egciniwe yokungena, noma i-akhawunti yesevisi yohlelo, futhi umthombo urekhoda lokho elikunikiwe. Ngakho umkhondo wokucwaninga okhombisa i-akhawunti yesevisi esizindalwazini awufakazi ukuthi umuntu waqalisa umbuzo. Awumkhombi futhi lowo muntu. Yilogi yeseshini yedeskithophu uqobo ehlanganisa leyo mibhalo emibili.

Ugunyazwa kwenzeka kabili, futhi isinqumo sesibili sithathwa ngemininingwane ehlukile. Esokuqala sinika umsebenzisi oqanjwe igama ukungena kudeskithophu, kanti esesibili sinika lokho ithokheni yalowo msebenzisi noma i-akhawunti yohlelo engakwenza kumthombo. Iqembu losizo lokusebenza elingavula ideskithophu aliyona ngokuzenzakalela iqembu elingafunda ithebula lamakhasimende.

Bheka ithokheni kanye nendlela yokudlulisela ngaphambi kokubhala inothi lokufinyelela. Kokubili kubonakala ngaphakathi kweseshini, futhi yiyo kuphela indawo lapho impendulo engeyona ukuqagela.

whoami /groups
klist
query session

Uma uhlelo lusebenzisa i-akhawunti yesevisi, amalungelo ayo yiwo abalulekile phambili. Ukushintsha leyo mininingwane yokungena kuyingxenye yokubuyekezwa kokufinyelela, hhayi umcabango wokusebenza wemuva.

Kungani indlela eqondile isavinjiwe, futhi ngokufanele

Umthetho wokwenqaba awulungile ngoba nje indawo okuhloswe ngayo ingafinyelelwa ngenye indlela. Ukuhlukaniswa kuhlolwa ngomthombo ngamunye, futhi ideskithophu ihlezi esigabeni esavunyelwa kudala ngaphambi kokuba umuntu acabange ukusisebenzisa njengendlela eya esizindalwazini. Akukho okwedlula umgomo. Umgomo uchaza nje imithombo emibili ehlukene enemiphumela emibili ehlukene.

Okufanele ukubuyekezwa kukuphendule ukuthi yini iseshini ngayinye egunyaziwe kuleyo hosti engayiqalisa. Iziphequluli ezineseshini ezigciniwe, amadrayivu axhunyiwe, ama-ejenti aphethe imininingwane yokungena, kanye nezinsizakalo ezilalela endaweni konke kwandisa ukufinyelela kwedeskithophu, futhi akukho kukho okubonakala kuthikithi enamikele ukungena. Lolo hlu yilo oluyindawo yangempela yezimvume.

Balalisa ngaphakathi kweseshini yokuhlola, hhayi kuspreyidishithi. Imiyalo eminingana ihlanganisa ingxenye enkulu yendawo.

Get-NetTCPConnection -State Listen | Select-Object LocalAddress,LocalPort,OwningProcess
net use
Get-ChildItem Env: | Where-Object Name -match 'PROXY|DATABASE|API'

Khetha umngcele ngamabomu

Izinhlobo ezintathu zifanele imisebenzi ehlukene, futhi ukukhetha kufanele kulandele umsebenzi hhayi ithuluzi elikhona ngenhlanhla. Uhlelo olushicilelwe lwembula uhlelo olulodwa olunemvume zalo, ideskithophu eligcwele limbula konke iphrofayili yomsebenzisi engakwenza, futhi i-akhawunti yesizindalwazi encane enomkhawulo womthombo yembula umthombo owodwa ngaphandle kwedeskithophu nhlobo. Isimo esincane kunazo zonke esisaqeda umsebenzi yiso okufanele sibhalwe phansi. Noma yini ebanzi kufanele ibe nesizathu esibhalwe eceleni kwayo.

Kumbiko owodwa, uhlelo olushicilelwe noma i-akhawunti elinganiselwe kuyisipho esincane kunesideskithophu esijwayelekile. Ekulungiseni okudinga ngempela amathuluzi ambalwa, ideskithophu lingase lifanele, kodwa lapho ukugunyazwa kuchaza yonke ihosti hhayi uhlelo olulodwa. Buza umnikazi womthombo ukuthi iyiphi kulezi abavumelana nayo.

Ukunyakaza kwedatha kuyiswishi ehlukile. Ibhodi lokunamathisela, ukuhoselisa amadrayivu kanye nokulanda kungahambisa idatha yenkampani kuklayenti, futhi ukusebenzisa uhlelo kude akugcini idatha kude ngokwako.

Hlola zombili izimvume kanye nendlela yokususa

Izimvume ezimbili zingena kurekhodi: ilungelo lokufinyelela nokuvula ideskithophu, kanye nelungelo lokusebenzisa imithombo ngaphakathi kwayo. Qamba umnikazi kwenye ngayinye futhi ugcine eyesibili ibonakala kunoma ubani obuyekeza umthombo. Yiyo leyo ngxenye yesibili umcwaningi azobuza ngayo, ngoba ichaza ukufinyelela hhayi ukungena. Bhala zombili ngaphambi kokugunyazwa koshintsho, hhayi ngemuva kwesigameko sokuqala.

Bese uhlola ukususa, ngoba iseshini enqanyuliwe ingaphila isikhathi eside kunesizathu sayo. Ithebula lamaseshini iyindawo eshesha ukubona okusasebenza.

query session
query user
qwinsta /server:rdsh01.corp.internal

Ukunqamula iklayenti kushiya iseshini ekude isebenza, futhi ukuxhumana kwayo kwenethiwekhi kanye nemininingwane yokungena egciniwe kungahlala kusebenzeka kuze kuphele leyo seshini. Phuma, noma qeda iseshini ngokusobala, bese uqinisekisa ukuthi isibali esingezansi siyeka ukuqhubeka ngemuva kwalokho. Ukuhlola kokususa okumane kuvala isivalo selaptop akufakazi lutho. Yenza lokho kuhlola okufanayo kanye nge-akhawunti evaliwe kanye ngemvume yedeskithophu esusiwe, bese urekhoda lokho umthombo okulugcina esimweni ngasinye.