Ibisambatheka bokhiye we-SSH livikela ifayela, hhayi umzila

Idiski lesipele elivela kukhompyutha ephathwayo endala lisakhiqiza ukhiye we-SSH wangasese, futhi othile uyabuza ukuthi i-VPN iyawuvikela yini. Ayiwuvikeli, futhi ayikaze ikwenze. I-VPN ivikela indlela phakathi kwamanethiwekhi amabili; ibisambatheka livikela ifayela; isijenti sivikela iseshini esebenzayo. Izindlela ezintathu ezihlukile, izindlela ezintathu zokwehluleka, futhi ikhophi entshontshiwe ikhathazeka ngezimbili zokuqala kuphela.

Ibisambatheka lingelifayela

Ibisambatheka sikhiye we-SSH sibethela impahla yokhiye wangasese ngenkathi iphumule. Akulona igama lokugqama le-akhawunti elithunyelwa kuseva, futhi akusona isiqinisekiso esisetshenziswa ukujoyina i-VPN. Ukuzihlanganisa kuholela ekushintsheni okungabhekeli ukuchayeka.

Incwadi yokuhola ye-OpenSSH ye- ssh-keygen ihlanganisa ukuphathwa kwamabizambatheka, kuhlanganise nesishintshi -p esibeka ibisambatheka elisha kukhiye osekhona kakade.

Kukhiye okhona, isimo somyalo silula, futhi sibhala kabusha ifayela:

ssh-keygen -p -f ~/.ssh/id_ed25519

Sebenzisa inqubo yokunakekela nokubuyisela evunyelwe umnikazi wokhiye, ngoba lokhu kuwukubhala, hhayi ukuhlola. Ungashicileli ifayela langasese futhi ungabeki ibisambatheka langempela emgqeni womyalo owabiwe. Ukushintsha ibisambatheka akubeteli kabusha ikhophi eyathathwa ngaphambili. Bhala indawo yekhophi endala kuthikithi ukuze umnikazi anqume ukuthi uyayichitha yini.

Ikhophi iphila isikhathi eside kunekhompyutha ephathwayo nomhubhe

Lapho ifayela lokhiye selikhonjiwe, ukuxhumana kwe-VPN okusebenzayo kwekhompyutha ephathwayo akusasho lutho ngakho. Okubalulekile ukuthi ifayela ngokwalo livikelwe kahle kangakanani, nokuthi imaphi amaseva asathemba ukhiye womphakathi ohambisanayo.

Ukushintsha ibisambatheka efayeleni lamanje akuthinti ikhophi, futhi akususi lowo khiye womphakathi ku-authorized_keys kuseva. Ukuhoxiswa nokubethelwa kabusha kuyizinyathelo ezihlukile.

Ngakho-ke thatha ukhiye wangasese ophumile njengesigameko sobunikazi, hhayi isigameko senethiwekhi. Susa noma shintsha ukhiye owamukelwe ngamaseva nanqubo yokubhalisa engumnikazi wawo. Ukumisa i-VPN kukhawulela umzila owodwa ngesikhathi esisodwa; akusona ukuhoxiswa.

Ukuvula kudlulisa imfihlo esijentini

Isijenti sigcina ubunikazi obukhululiwe ukuze kuqinisekiswe kamuva, ukuze umsebenzisi angaphindi abhale ibisambatheka kukho konke ukuxhumana. Lokhu kuwukukhululeka okunomngcele waso wokuphepha.

I-ssh-agent ingakhawulela ukuthi ubunikazi buhlala bulayishiwe isikhathi esingakanani ngokukhetha kwayo okuthi -t, futhi isilungiselelo sobunikazi ngabunye singadlula lowo mkhawulo. Khetha inqubomgomo yesijenti osisebenzisa ngempela esikhundleni sokucabanga ukuthi ukunqamuka kwe-VPN kukhohlwa wonke ukhiye olayishiwe.

Inqubo ehlatshwayo ngemva kokuvulwa kokhiye iyinkinga ehlukile kunefayela elibethelwe elintshiwe. Ukudlulisela isijenti kwelinye ihosi kugunyaza ikhono lokuqinisekisa ngaphandle kokukhopisha ifayela lokhiye, ngakho-ke kusebenzise kuphela isidingo esivunyelwe.

Bhala okuphethwe isijenti manje ngaphambi nangemva koshintsho:

ssh-add -l

Imisebenzi engaqashwanga ngaphandle kokuqapha idinga uhlelo lwayo

Umsebenzi ohleliwe awukwazi ukuphendula umbuzo. Udinga ukuhlelwa kokuqinisekisa komshini okuvunyelwe, futhi ukugcina imfihlo yokuvula kukhona kundawana efanayo nokhiye, efundeka nge-akhawunti efanayo, akudali umngcele wesibili.

Sebenza nomnikazi womsebenzi mayelana nokulethwa kwemfihlo okusekelwayo noma ukusebenza okusekelwe kuzinto zokusebenza, futhi hlanganisa ukuvuselelwa, ukwehluleka nokubuyisela. Ukufuna umuntu abe sekhibhodi kushintsha indlela ukwehluleka okubonakala ngayo uma kuqhathaniswa nehosi eqala ngaphandle kokuthi kukhona oqaphelayo.

Gcina futhi ukuhlolwa kobunikazi behosi kuseva kanye nemikhawulo ye-akhawunti yayo. Umzila we-VPN ukunikeza indlela yangasese; awufakazi ukuthi yonke isilaleli se-SSH osifinyelelayo iyihosi oyayiqondile. Bhala isilaleli kanye nophawu lweminwe lokhiye wehosi kuhlu olufanayo nokhiye uqobo.

Qinisekisa imingcele ngokwehlukana

Hlola umngcele ngamunye ngombuzo wawo. Ingabe ifayela liyavuleka ngaphandle kwebisambatheka? Ingabe isijenti sisabamba ubunikazi ngemva kokunqamuka? Ingabe iseva isamukela ukhiye womphakathi?

Imiyalo emibili iphendula eyokuqala neyesithathu:

ssh-keygen -y -f ~/.ssh/id_ed25519
ssh -v [email protected]

Bhala ukuvikelwa kwefayela, ukusetshenziswa kokhiye okuvunyelwe kanye nokususwa ohlangothini lweseva njengemigqa emithathu ehlukile. Umhubhe, ibisambatheka nesijenti ngakunye kugada ingxenye ehlukile yobudlelwano, futhi kukodwa kuphela okumayelana nenethiwekhi.