Indawo Yokugunyazwa Kwe-VPN: Iyiphi Indawo Yamagama E-akhawunti Ewina?

Konke ukungena kwe-VPN kugcina kusesikhala samagama e-akhawunti, futhi indawo iyisikhethi esinquma ukuthi iyiphi. Ayisho lutho mayelana nezwe, indawo yeseva noma izinga lokuthembela. Amagama abasebenzisi amabili afanayo angahlala ezindaweni ezihlukene, yingakho igama lokugqitha elilungile kwesinye isikhathi liqinisekisa i-akhawunti engalungile. Le ncwadi yokuhola iqala ngokuqinisekisa uhlobo lobunikazi, bese ilandelela isicelo kuze kufike kuhlelo oluphendule ngempela.

Indawo Ikhetha Ini

Isango lamukela igama lomsebenzisi futhi kufanele linqume ukuthi lizolibheka kuphi. Indawo iyingxenye yalelo gama, noma isici esiseduze nalo, ekhetha isizindalwazi: uhlu lwemibhalo, ichibi le-RADIUS, noma ifayela le-akhawunti lendawo. I-NPS yakwa-Microsoft ikubiza ngokuthi igama lendawa futhi ihambisa ngayo izicelo zokuxhumana, kuyilapho isihlonzi sokufinyelela kwenethiwekhi se-EAP sithwala umqondo ofanayo njengesijobe esingemva kophawu lwe-at ku-RFC 7542. Kokubili izikhethi, futhi akukho okunquma ukuthi ubufakazi bufanele yini.

Lokhu kwehlukana kuveza izingqinamba ezimbili ezihluke kakhulu. Indawo ehambisa kahle ngegama lokugqitha elingalungile inikeza ukunqatshwa okukodwa, kuyilapho indawo ehambisa esizindalwazini esingalungile inganqaba igama lokugqitha elilungile noma yamukele elomunye umuntu. Akukho phutha elikhuluma ngendawo, yingakho ukuxilongwa kokuqala kuhlale kufana: thola ukuthi yiluphi uhlelo oluphendule.

Isakhiwo sendawo sincike ekusetshenzisweni. Ezinye izinsiza zifuna igama elingagunyaziwe kanye nesici, ezinye zifuna user@domain, kanti ezimbalwa zilindela uhlobo olunomugqa ohlanekezelayo emuva abaningi abaqondisi abangakhulumi ngawo.

Sebenzisa Uhlobo Olulindelwe Yingxenye Yangemuva

Buza umqhubi ukuthi yiluphi uhlobo okufanele uluthayiphe ngaphambi kokuzama izijobe ezivela kusiqondisi. Igama eligunyazwe ngesizinda elifika engxenyeni yangemuva elindele igama elilula ngokuvamile lihluleka ekufuneni, hhayi ekuhloleni igama lokugqitha. Igama elifanayo elifushane ezindaweni ezimbili yisimo lapho indawo engekho yenza umonakalo omkhulu kakhulu.

Ungayithathi i-akhawunti yokuphatha njengobufakazi. Ikhonsoli yewebhu ophatha ngayo insiza ingase iqinisekise ngokumelene nefayela lendawo, kuyilapho umhubhe uhlola uhlu oluhluke ngokuphelele. Hlola ngobufakazi umsebenzisi wangempela angabuzisebenzisa, kusixhumi esibonakalayo umsebenzisi wangempela angasisebenzisa. Ukungena okuphumelelayo kwekhonsoli akusho lutho mayelana nendawo isango eliyisebenzisayo ekugunyazweni kwe-VPN.

Izinto zokuphequlula nezinhlelo ze-imeyili kwesinye isikhathi zigcina ubunikazi bangaphambilini bese zibuthumela futhi buthule. Lapho igama lomsebenzisi elibikiwe lihluka kwelithayiwe, leso sigcino siyindawo yokuqala okufanele ibhekwe.

Landelela Isicelo Nge-Proxy

Ku-front end ye-FreeRADIUS, izindawo zimenyezelwa ekuhlelweni kwe-proxy, futhi isijobe esimenyezelwe sinquma ukuthi iyiphi iseva yasekhaya ezothola isicelo. Funda lelo fayela ngaphambi kokushintsha noma yini, ngoba isicelo esingahambisani nandawo iyiphi sichithwa endaweni ngokuzenzakalela.

grep -n -A4 '^realm' /etc/freeradius/3.0/proxy.conf
radtest '[email protected]' 'wrong-password' 10.20.30.10 0 testing123
journalctl -u freeradius --since '-10 min' | grep -iE 'realm|stripped'

grep ikhombisa ukuthi iziphi izijobe ezikhona nokuthi ngayinye iqonde echibini eliphi. Ucingo lwe-radtest luthumela igama elinendawo kanye negama lokugqitha elingalungile ngamabomu, ngakho ukunqatshwa kufakazela ukuthi kokubili ukuhambisa kanye nokuhlola ubufakazi kwenziwe. Imigqa yencwadi yokulandelela ezungeze lowo mzamo ikhombisa ukuthi igama lasuswa ngaphambi kwe-proxy noma cha nokuthi iyiphi iseva yasekhaya eyalithatha. Uma irekhodi lingakhombisi ukufana kwendawo nhlobo, isicelo asizange sishiye iseva yendawo futhi inkinga isijobe, hhayi igama lokugqitha.

Shintsha into eyodwa ngesikhathi futhi uphindele umzamo, ngoba irekhodi lihlukanisa ukuhambisa ekuhlulekeni kobufakazi kuphela lapho okokufaka kuhluka phakathi kokugijima. Gcina imfihlo eyabiwe ngaphandle komlando we-shell lapho ithuluzi lisekela ukufunda kufayela noma kuphrompthi.

Rekhoda Umzamo Ngaphandle Kokuwudalula

Bhala ukuhluleka ngendlela umphathi angathatha isinyathelo ngayo: isixhumi esibonakalayo, uhlobo lobunikazi, ukuthi indawo ibikhona yini, kanye nephutha eliqondile elingeyona imfihlo. Gcina igama lomsebenzisi elisebenzayo ngaphandle kwemibiko yomphakathi futhi ugcine indawo ngaphakathi. Ukufihla bonke ubunikazi kusigcino esifanayo kufihla ngqo ukungafani okufunayo. Isigxivizo sesikhathi naso sibalulekile, ngoba isango, i-proxy kanye nohlu lwemibhalo bagcina amarekhodi ahlukene.

Bese ubhala phansi uhlobo olunqobile lwabasebenzisi, ngoba umuntu olandelayo ozoluthayipha ngokungalungile uzovula ithikithi elifanayo. Ukusetha kabusha igama lokugqitha akulilungisi isicelo esiqhubeka siwela esikhaleni samagama esingalungile. Indawo iyisinqumo sokuhambisa, futhi izinqumo zokuhambisa zilungiswa ngokuzibiza ngamagama afanele.