Kungani i-VPN ingayilungisi iwashi lekhibhodi exhunywe kudomaini

Isisebenzi esikude sixhuma i-VPN, ithuluzi liyaphakama, futhi ukungena kuqala ukwehluleka ngephutha lokuqinisekisa elikhuluma ngesikhathi. Akukho okonakele ethuluzini. I-VPN ihambisa amaphakethe phakathi kwamanethiwekhi; ayiniki amashini amabili iwashi elabiwe, futhi ukuqinisekisa kwedomaini, ukuqinisekiswa kwezitifiketi kanye nokuxhumana kwerekhodi lokuhlola konke kuncike emawashini avumelana ngokwanele. Kulokho kuvela izinqumo ezintathu: ubani umnikazi wesikhathi edomaini, yini isikhathi esiyisebenzisayo ngempela idivayisi, nokuthi kwenzekani lapho idivayisi izulazula.

Indlela akuwona iwashi

Ukuqinisekisa kwe-Kerberos kuqukethe idatha ebucayi ngesikhathi futhi kwenqaba izicelo ezingaphandle kokubekezelelana okumisiwe, okuyimizuzu emihlanu ngokuzenzakalela kumadomaini e-Windows. Izitifiketi zinezinga lokuphumelela, ngakho idivayisi enewashi elihamba phambili ngokwanele ithatha isitifiketi esivumelekile njengesingakavumeleki. Amarekhodi okuhlola avela emashini amaningi ahlangana kuphela uma amawashi awo eseduze, futhi lokho kubalulekile okokuqala lapho ukubuyekezwa kwesigameko kubuza ukuthi yini eyenzeka kuqala.

Lokho kuncika kwezintathu akuhlangene nethuluzi. Ukuphakamisa i-VPN kushintsha ukufinyeleleka, futhi ukufinyeleleka yikho okwenza idivayisi ithole umthombo wesikhathi; akuwona umthombo uqobo.

Hlukanisa indawo yesikhathi ekhonjisiwe newashi uqobo. Amakhikhodi amabili akhombisa izikhathi zendawo ezihlukene angavumelaniswa ngokuphelele, futhi amabili akhombisa ihora elifanayo angahluka ngemizuzu uma izilungiselelo zendawo yesikhathi zihlukile. Ukushintsha indawo yesikhathi akukona ukulungisa iwashi elingalungile, futhi ukubuyisa usuku emuva ukuze isitifiketi esiphelelwe yisikhathi sisebenze kwephula zonke ezinye izivivinyo ezincike esikhathini emshinini.

Nquma ukuthi ubani umnikazi wesikhathi edomaini

Amalungu e-Windows axhumene nedomaini ngokuvamile alandela uhlelo lwesikhathi lwe-Active Directory esikhundleni sokubuza iseva yomphakathi ngaso sonke isikhathi. Lolo chungechunge luphela ku-emulator ye-PDC yempande yehlathi, okuyireferensi yayo umthombo ogunyaziwe wenhlangano.

Izimo ezimbili zinquma ireferensi: ukuthi inqubomgomo ivumela isevisi yesikhathi yangaphandle, nokuthi inethiwekhi ingafinyelela ngokuthembeka umthombo wangaphakathi ogunyaziwe kusuka kusayithi ngayinye. Uma kokubili kungacaci, impendulo esebenzayo iwukugcina uhlelo luphelele nokulungisa ukufinyeleleka esikhundleni sokuqondisa amaklayenti echibini lomphakathi. Isimo sesithathu sinquma indlela yokwehluleka: okufanele ikwenze idivayisi lapho kungekho mthombo ongafinyeleleka. Ukunquma lokho kusengaphambili kugwema ukulungiswa okusheshayo kokugxilisa iseva yomphakathi kukhibhodi elilodwa.

Lolo khetho lungolwabaphathi bedomaini nesikhathi, hhayi lwedizayini yokufinyelela kude. Ikhibhodi ezilungiselela yona njengegunya lesikhathi elithembekile iyisakhiwo esihlukile, futhi akuvamisile ukuba yiso esagunyazwa ukubuyekezwa kwezokuphepha.

Funda ukuthi idivayisi isebenzisa ini ngempela

Imiyalo emibili yokufunda kuphela ibhala isimo samanje kudivayisi ye-Windows ephethwe, futhi kufanelekile ukuyithwebula ngaphambi nangemva koshintsho:

w32tm /query /source
w32tm /query /status
w32tm /query /configuration

Bhala umthombo okhethiwe, ukuvumelanisa kokugcina okuphumelele kanye ne-stratum noma isihlonzi sereferensi eceleni kwenqubomgomo yokuphatha idivayisi. Ukuvumelanisa kwesandla okukodwa okuphumelele kufakazela ukuthi umyalo uyasebenza, hhayi ukuthi inqubomgomo izophila ngemva kokuqalisa kabusha noma ukushintsha indima.

Uma umthombo ukhombisa iwashi le-CMOS lendawo, idivayisi ayivumelanisi nhlobo, lokho ngokuvamile kusho ukuthi isilawuli sedomaini besingafinyeleleki ngesikhathi sokuqalisa noma isevisi yesikhathi yavalwa inqubomgomo. Uma ikhombisa iseva yomphakathi, kukhona okungaphandle kohlelo lwedomaini okunqobayo, futhi lowo umbuzo wenqubomgomo, hhayi wenethiwekhi.

Nquma ukuthi kwenzekani lapho kuzulazula

Ngesikhathi inqanyuliwe, idivayisi incike ewashini lendawo kanye nanoma yibaphi abahlinzeki besikhathi engabafinyelela. Amakhikhodi ayadonsa, futhi idivayisi ebilokhu ingaxhunyiwe amasonto ingadonsa ngokwanele ukuthi isicelo sokuqala se-Kerberos ngemva kokuxhuma kabusha sehluleke.

Lapho ixhuma kabusha, idivayisi idinga ukutholwa kwedomaini kanye nendlela ehlosiwe yesevisi yesikhathi, hhayi nje umzila oya ekwabiweni kwamafayela. Kuvivinya lokho ngokuqalisa kabusha ngaphandle kwenethiwekhi, ukuxhuma i-VPN nokufunda umthombo futhi esikhundleni sokucabanga ukuthi uhlelo luzibuyisele lwalo.

Amamshini okufaniswa engeza omunye umhlinzeki. Ukuhlanganiswa kwesikhathi kwe-hypervisor kuwumthombo osemthethweni ezakhiweni eziningi, kodwa indima yayo kufanele ikhethwe ngamabomu futhi ixhumaniswe nenqubomgomo yedomaini. Abahlinzeki ababili abangavumelani bakhiqiza iwashi elibonakala lizinzile futhi elingalungile.

Gcina inqubomgomo yamalungu ihlukile egunyeni

Ukulungiselelwa kwamalungu ajwayelekile nokulungiselelwa kweseva egunyaziwe kuyizinkinga ezihlukile ezinokulawulwa koshintsho okuhlukile. Ukuzihlanganisa yikho okwenza ushintsho olujwayelekile lwenqubomgomo yekhibhodi lugcine lushintshe ireferensi yayo yonke ihlathi.

Bhala isinqumo ngemigqa emine: umthombo ogunyaziwe, uhlelo oluyiphathayo, ukuziphatha lapho kuzulazula, kanye nomyalo ofakazela isimo kudivayisi. Uma emithathu yokuqala ibhaliwe futhi eyesine iphindeka, ukwehluleka kokungena okuhlobene nesikhathi kuba ukuhlolwa kwemizuzu emihlanu esikhundleni sokucinga kumarekhodi e-VPN.