{"id":36872,"date":"2019-10-31T22:14:26","date_gmt":"2019-10-31T19:14:26","guid":{"rendered":"https:\/\/prohoster.info\/blog\/go-to-2fa-dvuhfaktornaya-autentifikatsiya-dlya-asa-ssl-vpn\/"},"modified":"2019-10-31T22:14:26","modified_gmt":"2019-10-31T19:14:26","slug":"go-to-2fa-dvuhfaktornaya-autentifikatsiya-dlya-asa-ssl-vpn","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/go-to-2fa-dvuhfaktornaya-autentifikatsiya-dlya-asa-ssl-vpn","title":{"rendered":"Mine 2FA (Kahefakohaline autentimine ASA SSL VPN jaoks)","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Vajadus pakkuda kaugjuurdep\u00e4\u00e4s ettev\u00f5tte keskkonnale on muutunud \u00fcha kiiremaks, olgu need siis teie enda kasutajad v\u00f5i partnerid, kes vajavad ligip\u00e4\u00e4su m\u00f5nele serverile teie organisatsioonis.<\/p>\n

Selleks kasutavad enamik ettev\u00f5tteid VPN-tehnoloogiat, mis on t\u00f5estanud end kui usaldusv\u00e4\u00e4rne ja turvaline meetod juurdep\u00e4\u00e4su pakkumiseks organisatsiooni lokaalsetele ressurssidele.<\/p>\n

Minu ettev\u00f5te ei ole erand, ja meie, nagu paljud teisedki, kasutame seda tehnoloogiat. Ja nagu paljud teised, kasutame kaugjuurdep\u00e4\u00e4su v\u00e4ravaks - Cisco ASA 55xx.<\/p>\n

Kaugkasutajate arvu suurenemise korral ilmneb vajadus lihtsustada kasutajakontode v\u00e4ljastamise protsessi. Kuid samal ajal tuleb seda teha ka ohutuse arvelt mitte j\u00e4releandmisi tehes.<\/p>\n

Oleme leidnud lahenduse Cisco SSL-iga \u00fchenduse loomisel kahefaktoriautentimise rakendamisest, VPN<\/a>, kasutades \u00fchekordseid salas\u00f5nu. See artikkel r\u00e4\u00e4gib, kuidas organiseerida sarnast lahendust minimaalsete ajakuludega ja nullkuludega vajaliku tarkvara osas (eeldusel, et Cisco ASA on juba teie infrastruktuuris olemas).<\/p>\n

Turg on tulvil lahendusi \u00fchekordsete salas\u00f5nade genereerimiseks, pakkudes samas erinevaid v\u00f5imalusi nende saamiseks, olgu need siis salas\u00f5nade saatmine SMS-i teel v\u00f5i kasutades token'ite, nii riistvara- kui tarkvaraversioone (n\u00e4iteks mobiiltelefonil). Kuid soov s\u00e4\u00e4sta raha oma t\u00f6\u00f6andjale, praeguses kriisis, sundis mind leidma tasuta viisi \u00fchekordsete salas\u00f5nade genereerimise teenuse rakendamiseks. Mis, oma tasuta olemise juures, ei j\u00e4\u00e4 palju maha kommertslahendustest (siinkohal tuleb m\u00e4rkida, et sellel tootega on ka kommertsversion, aga me oleme n\u00f5ustunud, et meie kulud rahas on null).
\n<\/a><\/noindex>
\nNii et meil on vaja:<\/p>\n

\u2014 Linuxi obraz, millega on kaasas t\u00f6\u00f6riistakomplekt \u2014 multiOTP, FreeRADIUS ja nginx, serverisse veebip\u00f5hiseks juurdep\u00e4\u00e4suks (http:\/\/download.multiotp.net\/ - kasutasin VMware jaoks valmislahendust)
\n \u2014 Active Directory server
\n \u2014 Siiski Cisco ASA (kasutan oma mugavuse huvides ASDM-i)
\n \u2014 Igasugune tarkvaraline token, mis toetab TOTP mehhanismi (n\u00e4iteks kasutan Google Authenticatorit, aga sobib ka FreeOTP)<\/p>\n

Ma ei hakka detailidesse laskuma, kuidas pildistatav pilt v\u00e4lja n\u00e4eb. L\u00f5pptulemusena saate Debian Linuxi, millel on juba installitud multiOTP ja FreeRADIUS, mis on konfigureeritud koos t\u00f6\u00f6tama ning web-liides OTP haldamiseks.<\/p>\n

Samm 1. K\u00e4ivitage s\u00fcsteem ja seadistage see oma v\u00f5rgu jaoks<\/b>
\nVaikimisi on s\u00fcsteem varustatud root-konto kasutajandmetega root root. Arvan, et k\u00f5ik on aru saanud, et oleks m\u00f5istlik vahetada root-kasutaja parool p\u00e4rast esimest sisselogimist. Samuti on vajalik muuta v\u00f5rgu seadeid (vaikimisi on see '192.168.1.44' koos v\u00e4ravaga '192.168.1.1'). P\u00e4rast seda v\u00f5ib s\u00fcsteemi taask\u00e4ivitada.<\/p>\n

Loome Active Directorys kasutaja otp<\/b>, parooliga MySuperPassword<\/b>.<\/p>\n

Samm 2. Seadistame \u00fchenduse ja impordime Active Directory kasutajad<\/b>
\nSelleks vajame juurdep\u00e4\u00e4su konsolile ja konkreetselt faili multiotp.php<\/b>, kasutades seda, seadistame Active Directory \u00fchenduse parameetrid.<\/p>\n

Liigume kausta \/usr\/local\/bin\/multiotp\/<\/i> ja j\u00e4rk-j\u00e4rgult t\u00e4idame j\u00e4rgmised k\u00e4sud:<\/p>\n

.\/multiotp.php -config default-request-prefix-pin=0<\/code><\/pre>\n
\nM\u00e4\u00e4rab, kas on vajalik t\u00e4iendava (p\u00fcsiva) PIN-koodi sisestamine \u00fche kasutusaja PIN-koodi sisestamisel (0 v\u00f5i 1)<\/p>\n
.\/multiotp.php -config default-request-ldap-pwd=0<\/code><\/pre>\n
\nM\u00e4\u00e4rab, kas domeeni parool tuleb sisestada \u00fche kasutusaja PIN-koodi sisestamise ajal (0 v\u00f5i 1)<\/p>\n
.\/multiotp.php -config ldap-server-type=1<\/code><\/pre>\n
\nM\u00e4\u00e4rab LDAP-serveri t\u00fc\u00fcbi (0 = tavaline LDAP-server, meie juhul 1 = Active Directory)<\/p>\n
.\\\/multiotp.php -config ldap-cn-identifier=\"sAMAccountName\"<\/code><\/pre>\n
\nM\u00e4\u00e4rab, millises formaadis kasutajanime esitada (see v\u00e4\u00e4rtus toob v\u00e4lja ainult nime, ilma domeenita)<\/p>\n
.\\\/multiotp.php -config ldap-group-cn-identifier=\"sAMAccountName\"<\/code><\/pre>\n
\nSama, ainult grupi jaoks<\/p>\n
.\\\/multiotp.php -config ldap-group-attribute=\"memberOf\"<\/code><\/pre>\n
\nM\u00e4\u00e4rab, kuidas m\u00e4\u00e4ratakse kasutaja kuuluvus gruppi<\/p>\n
.\/multiotp.php -config ldap-ssl=1<\/code><\/pre>\n
\nKas kasutada turvalist \u00fchendust LDAP-serveriga (loomulikult \u2014 jah!)<\/p>\n
.\/multiotp.php -config ldap-port=636<\/code><\/pre>\n
\nPort LDAP-serveriga \u00fchenduse loomiseks<\/p>\n
.\/multiotp.php -config ldap-domain-controllers=adSRV.domain.local<\/code><\/pre>\n
\nTeie Active Directory serveri aadress<\/p>\n
.\\\/multiotp.php -config ldap-base-dn=\"CN=Users,DC=domain,DC=local\"<\/code><\/pre>\n
\nM\u00e4\u00e4rame, kust alustada kasutajate otsimist domeenis<\/p>\n
.\\\/multiotp.php -config ldap-bind-dn=\"otp@domain.local\"<\/code><\/pre>\n
\nM\u00e4\u00e4rame kasutaja, kellel on \u00f5igused Active Directorys otsimiseks<\/p>\n
.\\\/multiotp.php -config ldap-server-password=\"MySuperPassword\"<\/code><\/pre>\n
\nM\u00e4\u00e4rame kasutaja parooli Active Directorysse \u00fchendamiseks<\/p>\n
.\/multiotp.php -config ldap-network-timeout=10<\/code><\/pre>\n
\nM\u00e4\u00e4rame aktiveerimise ajaloo Active Directoryga \u00fchenduse jaoks<\/p>\n
.\/multiotp.php -config ldap-time-limit=30<\/code><\/pre>\n
\nM\u00e4\u00e4rame ajapiirangu kasutajate importimise operatsioonile<\/p>\n
.\\\/multiotp.php -config ldap-activated=1<\/code><\/pre>\n
\nAktiveerime Active Directory \u00fchenduse konfiguratsiooni<\/p>\n
.\\\/multiotp.php -debug -display-log -ldap-users-sync<\/code><\/pre>\n
\nImpordime kasutajaid Active Directory'st<\/p>\n
Samm 3. Loome QR-koodi tokeni jaoks<\/b>
\nSiin on k\u00f5ik \u00e4\u00e4rmiselt lihtne. Avame OTP-serveri veebiliidese brauseris, logime sisse (\u00e4rge unustage muuta vaikimisi administraatori parooli!) ja vajutame nuppu \"Print\":<\/p>\n
\"Mine
\nSelle tegevuse tulemuseks on leht, kus on kaks QR-koodi. Me ei p\u00f6\u00f6ra t\u00e4helepanu esimesele (kuigi sellel on ahvatlev tekst Google Authenticator \/ Authenticator \/ 2 Steps Authenticator) ning skaneerime julgelt teise koodi tarkvaralisel tokenil telefonis:<\/p>\n
\"Mine
\n(jah, ma rikkusin meelega QR-koodi, et muuta see loetamatuks).<\/p>\n
P\u00e4rast neid toiminguid genereerib teie rakendus igakuiselt kuue numbriga parooli.<\/p>\n
Kinnitamiseks saate teha kontrolli samas liideses:<\/p>\n
\"Mine
\nSisestades kasutajanime ja \u00fchekordse parooli telefonirakendusest. Sai positiivne vastus? Siis liigume edasi.<\/p>\n
Samm 4. Kohandame ja testime FreeRADIUSi t\u00f6\u00f6d<\/b>
\nKuidas ma eespool mainisin \u2014 multiOTP on juba konfigureeritud FreeRADIUSiga t\u00f6\u00f6tamiseks, me peame vaid testid l\u00e4bi viima ja lisama FreeRADIUSi konfiguratsioonifaili teave meie VPN-sillast.<\/p>\n
Naaseme serveri konsooli, katalooge \/usr\/local\/bin\/multiotp\/<\/i>, sisestame:<\/p>\n
.\\\/multiotp.php -config debug=1\\n.\\\/multiotp.php -config display-log=1<\/code><\/pre>\n
\nL\u00fclitades seel\u00e4bi sisse \u00fcksikasjalikuma logimise.<\/p>\n
FreeRADIUSi klientide konfiguratsioonifailis (\/etc\/freeradius\/clinets.conf<\/i>) kommenteerime k\u00f5ik read, mis puudutavad localhost<\/b> ja lisame kaks ettepanekut:<\/p>\n
client localhost {\\n        ipaddr = 127.0.0.1\\n        secret          = testing321\\n        require_message_authenticator = no\\n}<\/code><\/pre>\n
\n \u2014 testimiseks<\/p>\n
client 192.168.1.254\\\/32 {\\n        shortname =     CiscoASA\\n        secret =        ConnectToRADIUSSecret\\n}<\/code><\/pre>\n
\n \u2014 meie VPN-sillale.<\/p>\n
Taask\u00e4ivitame FreeRADIUSi ja proovime autentida:<\/p>\n
radtest username 100110 localhost 1812 testing321<\/code><\/pre>\n
\nkus username <\/i>= kasutajanimi, 100110 <\/i>= parool, mille rakendus meile edastas, localhost <\/i>= RADIUS-serveri aadress, 1812 <\/i> \u2014 RADIUS-serveri port, testing321 <\/i> \u2014 RADIUS-serveri kliendi parool (mille me konfiguratsioonis m\u00e4\u00e4rasime).<\/p>\n
Selle k\u00e4su tulemusena on v\u00e4ljund umbes j\u00e4rgmise sisu:<\/p>\n
Saadan Access-Request id 44 aadressile 127.0.0.1 port 1812\n        User-Name = \"username\"\n        User-Password = \"100110\"\n        NAS-IP-Address = 127.0.1.1\n        NAS-Port = 1812\n        Message-Authenticator = 0x00000000000000000000000000000000\nrad_recv: Access-Accept pakk hostilt 127.0.0.1 port 1812, id=44, pikkus=20<\/code><\/pre>\n
\nN\u00fc\u00fcd peame veenduma, et kasutaja on edukalt autentitud. Selleks vaatame multiotp logisse:<\/p>\n
tail \/var\/log\/multiotp\/multiotp.log<\/code><\/pre>\n
\nJa kui viimaseks kirjeks seal on:<\/p>\n
2016-09-01 08:58:17     notice  username  Kasutaja    OK: Kasutaja username logis edukalt sisse aadressilt 127.0.0.1\n2016-09-01 08:58:17     debug           Debug   Debug: 0 OK: Token aktsepteeritud aadressilt 127.0.0.1<\/code><\/pre>\n
\nSiis on k\u00f5ik l\u00e4inud edukalt ja me saame j\u00e4tkata<\/p>\n
Samm 5. Cisco ASA seadistamine<\/b>
\nOletame, et meil on juba seadistatud r\u00fchm ja poliitikad SSL VPN-i ligip\u00e4\u00e4suks, seadistatud koos Active Directoryga, ja me peame lisama kaheastmelise autentimise sellele profiilile.<\/p>\n
1.<\/strong> Lisame uue grupi serverid<\/a> AAA:<\/p>\n
\"Mine
\n2.<\/strong> Lisame r\u00fchma meie multiOTP serveri:<\/p>\n
\"Mine
\n3.<\/strong> Muudame \u00fchenduse profiili<\/b>, m\u00e4\u00e4rates p\u00f5hivahenditena autentimise jaoks Active Directory serverite grupi:<\/p>\n
\"Mine
\n4.<\/strong> Sakil Advanced -> Authentification<\/b> samuti valime Active Directory serverite grupi:<\/p>\n
\"Mine
\n5.<\/strong> Sakil Advanced -> Secondary<\/b> autentimise puhul valime loodud serverite grupi, kus on m\u00e4\u00e4ratud multiOTP-server. T\u00f5stame esile, et sessiooni kasutajanimi p\u00e4randub AAA esmase serverite grupist:<\/p>\n
\"Mine
\nKinnitame seaded ja<\/p>\n
Samm 6, viimane<\/b>
\nKontrollime, kas meie kaheastmeline autentimine SSL VPN-i jaoks t\u00f6\u00f6tab:<\/p>\n
\"Mine
\nVoil\u00e0! Cisco AnyConnect VPN kliendiga \u00fchendamisel k\u00fcsitakse samuti teist, \u00fchekordset parooli.<\/p>\n
Loodan, et see artikkel aitab kedagi ja annab v\u00f5imalusi m\u00f5elda, kuidas seda kasutada, tasuta<\/b> OTP-serverit, teiste \u00fclesannete jaoks. Jagage kommentaarides, kui on soovi.
\n
Allikas: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u041f\u043e\u0442\u0440\u0435\u0431\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0432\u0441\u0435 \u0447\u0430\u0449\u0435 \u0438 \u0447\u0430\u0449\u0435, \u043d\u0435 \u0432\u0430\u0436\u043d\u043e, \u0431\u0443\u0434\u044c \u0442\u043e \u0441\u0432\u043e\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u043b\u0438 \u043f\u0430\u0440\u0442\u043d\u0435\u0440\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0442\u043e\u043c\u0443 \u0438\u043b\u0438 \u0438\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0432 \u0432\u0430\u0448\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \u0414\u043b\u044f \u044d\u0442\u0438\u0445 \u0446\u0435\u043b\u0435\u0439, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044e VPN, \u0437\u0430\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u0432\u0448\u0443\u044e \u0441\u0435\u0431\u044f, \u043a\u0430\u043a \u043d\u0430\u0434\u0435\u0436\u043d\u043e \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \u041c\u043e\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0441\u0442\u0430\u043b\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27626,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-36872","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Mine 2FA (Kaheastmeline autentimine ASA SSL VPN-ile) | ProHoster","description":"Vajadus pakkuda kaugjuurdep\u00e4\u00e4su ettev\u00f5tte keskkonnale muutub \u00fcha sagedasemaks, olgu need siis meie kasutajad v\u00f5i partnerid, kellele on vajalik juurdep\u00e4\u00e4s teatud serverile teie organisatsioonis..","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/go-to-2fa-dvuhfaktornaya-autentifikatsiya-dlya-asa-ssl-vpn","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Go to 2FA (\u0414\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0434\u043b\u044f ASA SSL VPN) | ProHoster","og:description":"\u041f\u043e\u0442\u0440\u0435\u0431\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0432\u0441\u0435 \u0447\u0430\u0449\u0435 \u0438 \u0447\u0430\u0449\u0435, \u043d\u0435 \u0432\u0430\u0436\u043d\u043e, \u0431\u0443\u0434\u044c \u0442\u043e \u0441\u0432\u043e\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u043b\u0438 \u043f\u0430\u0440\u0442\u043d\u0435\u0440\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0442\u043e\u043c\u0443 \u0438\u043b\u0438 \u0438\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0432 \u0432\u0430\u0448\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438..","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/go-to-2fa-dvuhfaktornaya-autentifikatsiya-dlya-asa-ssl-vpn","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:14:26+00:00","article:modified_time":"2019-10-31T19:14:26+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36872","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:05:56","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:37:23","updated":"2026-02-09 17:05:56","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/36872","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=36872"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/36872\/revisions"}],"predecessor-version":[{"id":158589,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/36872\/revisions\/158589"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/27626"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=36872"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=36872"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=36872"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}