Kungani i-PPP CHAP yodwa ingeke yehlise isidingo se-MPPE

Iphrofayili ye-PPTP egcizelela ukubethela ivamise ukwehluleka endaweni efanayo: i-PPP ivumelana ngokushintshana kokuqinisekisa okungakhiqizi neze impahla yokhiye edingwa yi-MPPE. Umhubhe ubonakala uphila kancane, iphasiwedi iyamukelwa, futhi isixhumanisi siyawa ngaphambi kokuba noma yikuphi ukuhamba kudlule kuwo. Ukufinyelela ohlwini lwe-CHAP kuze kuxhumane okuthile kufihla isici sangempela, futhi leso yisivumelwano phakathi kwendlela yokuqinisekisa nenqubomgomo yokuvikela. Izihlolo ezingezansi zihlelwe ukuze ngayinye ikhiphe isizathu esishibhile kunesilandelayo.

Izingxoxo ezimbili zenzeka ngaphakathi koxhumano olulodwa lwe-PPTP

I-PPTP ithwala iseshini evamile ye-PPP ngaphakathi komhubhe we-GRE, futhi zombili zixoxa ngokwahlukana. Isendlalelo sangaphandle sinquma ukuthi amaphakethe ahlanganiswa kanjani nokuthi yiluphi ujantshi lokulawula olukhona; iseshini ye-PPP yangaphakathi inquma ukuthi ngubani umlingani nokuthi yikuphi ukuvikela okugibela phezulu. Ngakho isicelo sephasiwedi sifakazela okuthile mayelana nesendlalelo sangaphakathi kuphela, futhi ukuxhawulana kwangaphandle okuqediwe akufakazeli lutho nganoma yikuphi kwalokhu kokubili. Amaphrofayili ehluleka lapha ngoba abantu balungisa umhubhe kuyilapho ukungavumelani kuhlezi ngaphakathi kwe-PPP.

I-CHAP evamile ingukushintshana kwenselelo nempendulo ku-RFC 1994, eyakhiwe phezu kwemfihlo eyabiwe futhi akukho okunye. I-MS-CHAPv2 ingolunye ukushintshana okunemilayezo ehlukile kanye nomphumela ohlukile, okujwayelekile ku-RFC 2759. Igama elabiwe kumabizo womabili iwukuphela kwento abayabelana ngayo ocingweni. Alikho igama elisho ukuthi ukushintshana kukhiqiza ini, futhi yilowo kuphela ingxenye ebalulekile.

Yingakho ukukhetha okubhalwe ngokuthi i-CHAP kuphela kungacaci embhalweni wakudala. Lapho iseva ifuna i-MS-CHAPv2 kanti iklayenti linikela nge-CHAP evamile, ukulawula isixhumanisi kusengaqedwa futhi iphasiwedi isengamukelwa. Ukwehluleka kufika kamuva, lapho iseva izama ukukhipha okhiye bokuvikela ekushintsheni okungakhiqizanga lutho.

Hlanganisa indlela edingekayo nokhiye engakukhiqiza

Okhiye be-MPPE abasiwo isici se-PPP ngokujwayelekile. Emndenini we-Microsoft CHAP ukukhishwa kuchazwe ku-RFC 3079, futhi kuthatha njengokufakwayo umphumela wokushintshana kwe-MS-CHAP esikhundleni semfihlo eyabiwe. Izindlela ze-EAP zifinyelela endaweni efanayo ngomunye umzila, iseva yokuqinisekisa ibuyisela okhiye njengezici ze-MS-MPPE-Recv-Key ne-MS-MPPE-Send-Key. I-CHAP evamile ayiveli kumzila womabili, futhi yisona sizathu sonke sokuba lokhu kungafani kube khona.

Isakhiwo esidinga i-MPPE kuyilapho senqaba zonke izindlela ezingakunikeza ngokhiye siyaziphikisa ngaphakathi. I-pppd ixazulula lokho kuphikisana ngokwenqaba isixhumanisi, hhayi ngokuqamba okhiye, ngakho umphumela obonakalayo yiseshini eqinisekisa bese iphetha esigabeni senethiwekhi. Ukuphinda uzame iklayenti ngeke kukushintshe lokho uma iseva isenqaba izindlela okuwukuphela kwazo ezikhipha okuthile.

Umthetho olandelayo mfishane: uma iphrofayili idinga i-MPPE, indlela kufanele ibe uhlobo lwe-MS-CHAP noma indlela ye-EAP okhiye bayo iseva ebuyisela yona. Ukwenqaba i-MS-CHAPv2 kuphela akukuphoqeleli lokho, ngoba ne-MS-CHAPv1 ikhipha okhiye futhi ihlala itholakala ngaphandle uma yenqatshwa ngokwahlukana; ukwenqaba kokubili kushiya i-CHAP evamile ne-PAP, ezingakhiqizi lutho futhi zenza isidingo singafezeki. Bika indlela eyamukelwe ngokusobala esikhundleni sokubala lezo ongazithandi. Ukushiya isidingo sokubethela ukuze iklayenti lixhume wukwehlisa izinga, hhayi ukulungisa.

Funda izinketho zeseva ngaphambi kokuhlela iklayenti

Iningi lalokhu kungafani libonakala kuseva kumafayela amabili, futhi ukuwafunda kushibhile kunokwakha iklayenti kabusha. Endaweni yokugcina ye-PPTP ku-Linux izilungiselelo ezifanele zihlala efayeleni lezinketho ze-pppd elidluliswa yi-pptpd. Yisebenzise kuseva, hhayi esikrinini sesimo seklayenti. Qala ngemigqa edinga, enqaba noma eqamba imodi yokuvikela:

sudo grep -nE 'require-|refuse-|mppe|mschap' /etc/ppp/options.pptpd

Funda umphumela njengesivumelwano hhayi njengohlu lwamafulegi. Umugqa odinga i-MPPE kuyilapho wenqaba zombili izinhlobo ze-MS-CHAP awukho iklayenti elingawufeza, futhi ukungabi khona kwesidingo sendlela ye-MS-CHAP kushiya umnyango uvulekile ekushintsheni okunganiki okhiye. Bese uhlola ukuthi ngubani ovunyelwe ukuqinisekisa nhlobo, okuyinto enqunywa yifayela lemfihlo:

sudo sed -n '1,20p' /etc/ppp/chap-secrets
sudo pppd --version

Bhala amanani amathathu ngaphambi kokushintsha noma yini: iphrothokholi yangaphandle, indlela yokuqinisekisa edingwa yiseva, nokuthi ukuvikela kuyimpoqo noma kungokuzithandela. Lawa mathathu anquma sonke isinqumo esilandelayo, futhi ukuwaqagela kusukela engxoxweni yeklayenti yiyo indlela iphrofayili egcina ngokuba ingakacwangciswa kahle. Gcina ifayela livuliwe ngenkathi usebenza, ngoba ingxenye elandelayo idinga lawo manani mathathu.

Thola ukwehluleka ngokwesigaba se-PPP

I-PPP ibika ukwehluleka ngezigaba, futhi isigaba sisho ukuthi iyiphi igatsha lesivumelwano elaphukile. Isixhumanisi esingasoze sishiye ukulawula isixhumanisi sinenkinga yokuhlanganisa noma yezingxoxo, kuyilapho leso esiqinisekisa bese sifa ngokuvamile sinenkinga yenqubomgomo noma yokhiye. Isixhumanisi esihlala sikhona futhi singathwali lutho sidlulele ekuhambiseni, okuwuphenyo oluhlukile.

Ijenali igcina imigqa yezigaba, futhi iwusizo kuneleveli ephezulu yokulungisa amaphutha. Cela izinqubo ze-PPP nemilayezo yokuvikela, bese ufunda umphumela wokuqinisekisa ngaphambi kwanoma yini enye. Imigqa yokugcina ivamise ukubiza igatsha elenqabile:

sudo journalctl -b --no-pager | grep -iE 'pppd|pptpd|mppe|chap' | tail -40

Kulowo mphumela, funa umphumela wokuqinisekisa kuqala bese kuba isikhalo sokuthi ukuvikela bekudingeka kodwa akuzange kuxoxwe. Umlayezo wesibili wusayini wokuphikisana okungenhla, futhi akukho nani lokuphinda uzame eliwususayo uma iseva isenqaba indlela eyodwa kuphela yokukhiqiza okhiye. Kufanele kubizwe izingibe ezimbili: ukukhweza ileveli yokulungisa amaphutha ngaphandle kokufunda imigqa yezigaba kukhiqiza umsindo, futhi ukubamba impahla yenselelo noma amaphasiwedi kuguqula umsebenzi wokucwangcisa ube wukuchitheka kwezifakazelo. Bhala leso sigaba ngaphambi kokushintsha noma iyiphi inketho.

Hlela ukuphuma ngaphambi kokuthi indawo yokugcina endala icishwe

I-MPPE iwumshini wokuvikela isixhumanisi womlando, futhi ukuba khona kwayo akwenzi i-PPTP ibe ukukhetha okunengqondo kokusatshalaliswa okusha. Umhlahlandlela wamanje we-Microsoft usuvele weluleka ngokumelene ne-PPTP nange-L2TP/IPsec enokhiye owabiwe kusengaphambili kokusatshalaliswa okusha kokufinyelela kude. Ukugcina indawo yokugcina endala iphila yisinqumo ngensizakalo ekhona, hhayi isifanekiso salokho okulandelayo.

Lapho indawo yokugcina kufanele ihlale, bhala isivumelwano: iphrothokholi yangaphandle, indlela yokuqinisekisa edingekayo, ukuvikela okuyimpoqo, kanye nenguqulo yeklayenti exoxa ngakho. Lapho ingahamba, ngaphambi kokuthinta iphrofayili endala khetha ubunikazi besango lomfeli, ukuqinisekisa kwayo iklayenti nendawo lapho izifakazelo ziyohlala khona. Bese uhlela imizila, i-DNS kanye nezinsiza okugunyazwe umsebenzisi ngamunye ukuzifinyelela. Qinisekisa iklayenti elihlosiwe ngokumelene nezidingo zomnikazi hhayi ngokumelene noxhumano olusebenzayo.

Ukwenqaba ngamabomu kufanele kuhlale kuwukwenqaba, ngoba ukubuyela emodini ongenakuvikelwa ukuze isivivinyo sidlule kuguqula ukwehluleka kwenqubomgomo kube wukuchayeka. Isimo esiqediwe yisivumelwano esisekelwayo nesibhalwe phansi, hhayi isethi encane yezinguquko eyenza uxhumano olulodala luluphumelele. Shiya iphrofayili endala endaweni yayo, ingasetshenziswa futhi ibhalwe phansi, kuze kube yilapho umfeli edlula izihlolo ezifanayo.