Kungani i-VPN yakho ye-Mac icela ukufinyelela kwe-Keychain njalo
Thola ukuthi iyiphi ingxenye edala isicelo ngasinye se-VPN ku-Mac, vimba imizamo yokuxhuma ephindwe kabili, futhi ulungise ukufinyelela kwe-Keychain ngaphandle kokusetha kabusha yonke i-keychain.
Ukuchofoza kanye ku-Connect kufanele kuveze iwindi elilodwa lokungena. Ku-Mac ngokuvamile kuveza amathathu, futhi awavamile ukwabelana ngumnikazi oyedwa: i-keychain ingumnikazi wezicelo zasendaweni zemininingwane yokungena, ingqamuzana ye-VPN ingumnikazi wokuqinisekisa, futhi iklayenti ingumnikazi wezaziso zayo. Esikhundleni sokufuna iswishi ethulisa konke, thinta iwindi ngalinye njengephutha elihlukile elinokulungiswa kwalo. Umhlahlandlela ongezansi udlula emzamweni owodwa wokuxhuma ohlosiwe futhi uphetha ngokuhlola ongakwenza kabusha.
Qamba umnikazi wengxoxo ngayinye ngaphambi kokushintsha isilungiselelo
Isinyathelo sokuqala ukubala, hhayi ukumisa. Yenza umzamo owodwa wokuxhuma futhi, kwiwindi ngalinye elivelayo, bhala izinkambu ezine: igama lohlelo eliboniswe engxoxweni, umbhalo oqondile ngaphandle kwanoma yini eyimfihlo, isigaba lapho ivelile, kanye nokwenzekile lapho ukhansela. Imigqa emithathu enjalo ihlanganisa cishe wonke umbiko engiwubonile.
Ubunikazi bunquma ukulungiswa okulungile, futhi ukulungiswa okungalungile ngokuvamile yikho okuguqula isicelo esisodwa sibe yizintathu:
| Window | Who owns it | Correct fix | What not to do |
|---|---|---|---|
| “wants to use your confidential information stored in…” | The item's access control list in your login keychain | Approve the specific client helper, once, after checking the name | Resetting the login keychain, or granting Always Allow to every application |
| “Sign in to <organization>” or an MFA push | The gateway's identity provider | Use the client's supported session renewal, or re-authenticate | Scripting a fixed password or code into the client |
| “Connection failed”, “Update required”, a policy banner | The client or your organization | Read the first error and fix its cause | Hiding notices by editing a preference file the client rewrites |
Isicelo esibuya ngaphakathi komzamo ofanayo siyisiginali ehlukile kuleso esibuya emzamweni olandelayo. Esokuqala ngokuvamile sisho ukuthi ukuxhumana kwaqalwa kabusha ngaphansi kwakho; esesibili ngokuvamile sisho ukuthi imininingwane yokungena egciniwe iyabuzwa futhi. Bhala ukuthi yikuphi onakho ngaphambi kokuthinta i-keychain, ngoba lezi ezimbili cishe azinalutho olufanayo.
Thola ukuthi zingaki izinto eziqala ithumbu
Izindlela ezine zingaqala i-VPN efanayo ku-Mac: isenzo kubha yemenyu, into yokungena, umthetho we-On Demand, kanye neskripthi noma i-ejenti. Lapho ezimbili zazo ziqala, ukuqala kwesibili kungafika ngesikhathi esokuqala sisalinde ukuqinisekisa, okudala iwindi eliphindwe kabili futhi kungabi nkqubela. Qala ngokubhala lokho okulungisiwe: scutil --nc list iphrinta izinsizakalo ze-VPN ezaziwa Izilungiselelo Zesistimu, kanye nesimo sazo samanje. Amaklayenti aletha isandiso sawo senethiwekhi agcina amaphrofayili ngaphakathi kohlelo futhi kungenzeka angabonakali lapho, ngakho hlola nohlu lwakhe lokuxhumana.
Bese ufuna iziqalisi eziqhudelanayo. scutil --nc show "Work VPN" iphrinta isichazamazwi sokumisa sensizakalo eyakhelwe ngaphakathi, kanye nemithetho ye-On Demand; umthetho oxhuma kabusha kunoma yikuphi ukushintsha kwesixhumanisi uzoqala kabusha ithumbu — futhi uvule isicelo sokuqinisekisa futhi — njalo lapho i-Wi-Fi ihamba noma isibonisi sivusa isitaki senethiwekhi. Hlola izinto zokungena ngaphansi kwezilungiselelo zesistimu > Jikelele > Izinto Zokungena, futhi bhala ama-ejenti ngomsebenzisi ngamunye nge ls ~/Library/LaunchAgents. Shiya noma yini ephethwe isitaki sokuphepha esilawulwa yi-MDM; ukususa kwayo kuvame ukubuyiselwa ekuhloleni okulandelayo.
Ukuze ubone okusebenzayo ngempela phakathi nomzamo: ps -Ao pid,comm | grep -iE 'vpn|tunnel|extension'. Ukuba nabasekeli ababili beklayenti lapho ulindele oyedwa kuchaza "kungani ngithole izicelo ezimbili" kaningi kakhulu kunanoma iyiphi inkinga yemininingwane yokungena.
Lungisa ukufinyelela kwe-Keychain ngaphandle kokusetha kabusha i-keychain
Isicelo sivela ohlwini lokulawula ukufinyelela lwento egciniwe, hhayi kuphrothokholi ye-VPN. Into ngayinye ibhala ukuthi yiziphi izinhlelo ezingayifunda ngaphandle kokubuza. Ngemuva kokubuyekezwa kweklayenti, umsekeli obuzayo angaba negama noma isiginesha ehlukile ngesikhathi into isabala eyakudala, ngakho i-macOS ibuza futhi kukho konke ukuxhumana. Ukuvuma umsekeli omusha wento eyodwa kuphela ukulungiswa konke; ukuvuma zonke izinhlelo akusikho.
Ungaqinisekisa ukuthi i-ACL iyimbangela ngaphandle kokuthinta i-VPN: security find-generic-password -s "service-name" -g ifunda into efanayo kusuka kutheminali. Uma lowo myalo nawo uveza isicelo, ingxoxo ingeyekeychain futhi ithumbu liyisigxivizo kuphela. Iziqondiso ze-Apple mayelana namabhathini amathathu — Vumela Kanye, Vumela Njalo, Nqaba — kufanele zifundwe kanye, ngoba ukunqaba yikho okwenza isicelo sibuye ngokushesha esikhundleni somzamo olandelayo.
Uma uvume umsekeli ongafanele, vula into ku-Keychain Access, shintshela ku-Access Control futhi ususe lokho kufakwa; lokho ukubuyisela emuva. Ukususa i-keychain yokungena, noma ukusebenzisa ithuluzi lokulungisa eliyakha kabusha, nakho kulahla amaphasiwedi angenasihlobo futhi kuwushintsho olukhulu kakhulu kunenkinga.
Gcina izinyathelo zokungena kanye nenqubomgomo emifudwaneni eziyiphetheyo
Ukungena ngesiphequluli noma inselelo ye-MFA kungokwengqamuzana. Uma inhlangano yakho inikeza ukuhlala kweseshini noma ukuqinisekisa okusekelwe kusitifiketi, kusebenzisa, ngoba yiyo indlela esekelwayo yokuqinisekisa kanginingi kangako. Ukuthayipha ikhodi engashintshi kuklayenti, noma ukugcina iphasiwedi kuskripthi ukuze isicelo singabonakali, kushintsha isici sokusebenzisana sibe imfihlo engashintshi futhi kuyahluleka lapho inqubomgomo ijika ngokulandelayo.
Izaziso zenhlangano yisigaba kuphela okufanele ungazicindezeli. Ngokuvamile ziphoqa ukuhlolwa kwesimo noma ukuvunywa kokusetshenziswa okwamukelekayo, futhi ukuzifihla kungakhipha idivayisi ekuhambisaneni ngisho ngesikhathi ithumbu lisebenza. Izingxoxo zamaphutha yisinye isigaba: gcina umbhalo wephutha lokuqala, ngoba ingxoxo yesibili ivamise ukuba ukwehluleka okufanayo okubikwe ngemva komzamo omusha.
Qinisekisa ngomzamo owodwa, bese kuba ngemva kokuqalwa kabusha
Ngemva kokususwa kweziqalisi eziphindwe kabili nokulungiswa kokufakwa kwe-keychain, yenza umzamo owodwa kuphela: vala yonke insima yeklayenti kuhlanganise umsekeli webha yemenyu, xhuma kanye, futhi ubale amawindi. Ufuna ukuvunywa kwe-keychain, uma into yakhiwe kabusha, kanye nesinyathelo esisodwa sokuqinisekisa. Akukho okunye. scutil --nc status "Work VPN" kufanele kubike i-Connected ensizakalweni eyakhelwe ngaphakathi.
Bese uqala kabusha kanye futhi uphinde. Isicelo esibuya kuphela ngemva kokuqalwa kabusha sikhomba entweni yokungena noma kumthetho we-On Demand, hhayi emininingwaneni yokungena; esibuya ngaphakathi kweseshini sikhomba ku-ACL noma kwisiqalisi sesibili. Uma sisaqhubeka siphindeka ngemva kwezikhathi zombili, into ewusizo oyipha umphathi wakho ithebula lemigqa emithathu kusuka emzamweni wokuqala — umnikazi, umbhalo oqondile, isigaba — hhayi isithombe sesikrini sengxoxo.
Umgomo izicelo ezimbalwa, hhayi ezingathuli. Ukuxhumana okufihla izinyathelo zako zokugunyaza ukuxhumana ongakwazi ukukuhlola futhi, futhi ukujika kwesitifiketi okulandelayo kuzokuthola ungazi ukuthi iyiphi ingxenye ehlulekayo.