Kungani insiza ye-VPN eqala ngesikhathi sokuqala ingakwazi ukufunda iringi yakho yokhiye
I-VPN ngesikhathi sokuqala ayinayo i-agent yemfihlo evuliwe engayiboleka. Funda amafulegi emfihlo okuxhumana ngaphambi kokusetha kabusha iphasiwedi iseva engakaze iyichithe.
Ukuxhumana okusebenza ngemva kokungena futhi kwehluleke ngaphambi kwalokho ngokuvamile kusho ukuthi umzamo wesikhathi sokuqala awukwazanga ukuthola imfihlo, hhayi ukuthi iseva yayichithile. Ubufakazi bukhona; umongo obucelayo awukho. Lowo mehluko owodwa ugcina ukusethwa kabusha kwephasiwedi okungadingekile.
Landela isicelo: okuthile kuqala ukuxhumana ngaphambi kokuba kube khona iseshini yedeskithophu, futhi isitolo semfihlo esivame ukuphendula asikavulwa. Izingqikithi ezimbili azivumelani ngokuthi imfihlo ingeyani, futhi iphrofayela irekhoda ukuthi iyiphi kuzo okulindeleke ukuthi iyinikeze.
Indlela yokuqala icela ini ngempela
Ngesikhathi sokuqala, i-NetworkManager iqala njengensiza yesistimu ngaphandle kweseshini yomsebenzisi, ngaphandle kwe-D-Bus yeseshini nangaphandle kweringi yokhiye evuliwe. Iphrofayela yokuxhumana isengaphakanyiswa, kodwa kuphela ngezimfihlo insiza uqobo engazifikela. Noma yini ephethwe i-agent yemfihlo ilinda kuze kungene umuntu futhi kuvele i-agent. Insiza yenza ngqo lokho okusho ukuhlelwa kwayo; iphrofayela iyona okufanele ishintshwe.
Ukwehluleka kubhalwe ngaphakathi kokuxhumana, hhayi kufihlwe eringini yokhiye.
Ukufunda amafulegi emfihlo ekuxhumaneni
Buza ukuxhumana ukuthi kulindele ini, hhayi lokho ideskithophu ekukhumbulayo. Ikholomu yamafulegi iphendula umbuzo ngqo, futhi iyasinda ekuqaliseni kabusha kufayela lephrofayela elisekdiski.
Qala ngohlu lwamaphrofayela, bese uqinisekisa ukuthi ukuphi ukuxhumana okusethwe ukuthi kuphakame kukodwa. Bese ukhipha ukuxhumana okukodwa futhi ufunde amafulegi ephasiwedi:
nmcli -f NAME,UUID,TYPE,AUTOCONNECT connection show nmcli connection show "Work VPN" | grep -i -E "password|secret|key" journalctl -b -u NetworkManager --grep "secret"
Umyalo wokuqala uqinisekisa ukuthi yimaphi amaphrofayela akhona nokuthi ngabe elinye lisethwe ekuxhumaneni okuzenzakalelayo, okuyindlela umzamo ongenakuqashwa oqala ngayo. Owesibili udalula amanani amafulegi, kanti owesithathu ubonisa insiza ikhononda ngokuthi awekho i-agent ephendule imfihlo ethile. Umugqa welogi obiza imfihlo njengephethwe i-agent uyiwo wonke umhlahlandlela emushweni owodwa.
| Flag value | Where the secret lives | Behaviour before login |
|---|---|---|
| 0 | Stored in the connection profile | Available to the system service |
| 1 | Owned by a secret agent | Blocks until the agent is unlocked |
| 2 | Never stored | Prompts on every activation |
| 4 | Not required | Never requested at all |
Kungani ukuhambisa ukuxhumana endaweni yesistimu kushintsha impendulo
Ukuxhumana okuphethwe umsebenzisi kusebenza ngaphansi kwe-agent yalowo msebenzisi, yingakho kusebenza ngokuphelele lapho ideskithophu isiphakamile. Ukukuhambisa endaweni yesistimu kususa i-agent endleleni, ngakho iphrofayela efanayo iziphatha ngendlela ehlukile ngaphandle kokushintsha ngisho umugqa owodwa wokuhlelwa kwe-VPN.
Lokho kuhambisa kuwumklamo osemthethweni, futhi kuletha imfuneko: imfihlo kufanele ifinyeleleke yinsiza yesistimu. Ukuyigcina kuphrofayela, ukuyinikeza ngobufakazi bendawo yesistimu, noma ukwamukela isicelo esisebenzisanayo ngesikhathi esifanele konke kuyizimpendulo ezivumelekile. Ukushiya ifulegi 1 bese uthemba akusikho.
Ukhiye wangasese onomusho wakho wokuphuma kwephasiwedi wengeza ungqimba lwesibili. Ngisho nephasiwedi ye-akhawunti egciniwe ngeke ivule ukhiye ofuna umusho wokuphuma kwephasiwedi, ngakho qinisekisa ukuthi isiphi isigaba sezimfihlo esihlulekayo esicela sona ngempela ngaphambi kokushintsha noma yini.
Okungafanele ukwenze, nokufanele ukwenze esikhundleni salokho
Ukwenza wonke amafayela obufakazi afundeke kuwo wonke umuntu, noma ukucisha ubuqinisekisi ukuze kungadingeki sicelo, kushintshanisa ubunzima bokuqala nokuchayeka okuhlala njalo. Kokubili futhi kufihla ukuncika esikhundleni kokukuxazulula, futhi ukubuyekezwa kwesithombe okulandelayo kubuyisela ukwehluleka okufanayo.
Kuleso sigaba sebenzisa indlela echazwe ukusatshalaliswa kwakho yokwenza kusebenze ngaphandle kokuqashwa, bese uqinisekisa ukuthi amafulegi ephrofayela ayahambisana nayo. Hlola umphumela kusukela ekuqaliseni okuhlanzekile, hhayi kusukela ku-shell esine-agent kakade. Bhala umnikazi wokuxhumana, umthombo wemfihlo kanye nesigaba okufanele sisebenze, ukuze ushintsho lwakamuva lokuqalisa okuzenzakalelayo lungakwazi ukubuyisela buthule ukuncika ekutheni othile avule ideskithophu kuqala. Imibhalo iwumehluko phakathi kwensiza elungisiwe naleyo ephinde yephuke ngekota elandelayo.
Hlola kusukela ekuqaliseni okuhlanzekile okulawulwayo, hhayi ekuzameni kabusha ngesandla ngemva kokungena. Ukuzama kabusha kuphumelela ngesizathu esenza umzamo wesikhathi sokuqala wehluleke, futhi yibona kanye ubufakazi obuchithwa ukuhlolwa okusheshayo.