{"id":38891,"date":"2019-10-31T22:26:35","date_gmt":"2019-10-31T19:26:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/sovmestnoe-setevoe-ispolzovanie-kriptograficheskogo-tokena-polzovatelyami-na-baze-usbip\/"},"modified":"2019-10-31T22:26:35","modified_gmt":"2019-10-31T19:26:35","slug":"sovmestnoe-setevoe-ispolzovanie-kriptograficheskogo-tokena-polzovatelyami-na-baze-usbip","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/sovmestnoe-setevoe-ispolzovanie-kriptograficheskogo-tokena-polzovatelyami-na-baze-usbip","title":{"rendered":"\u00dchise v\u00f5rgu kasutamine kr\u00fcptograafilise tokeniga kasutajate poolt usbip baasil","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Seoses seadusandluse muutmisega usaldusv\u00e4\u00e4rsete teenuste osas (\"Elektrooniliste usaldusv\u00e4\u00e4rsete teenuste seadus\" Ukrainas) on ettev\u00f5ttes tekkinud vajadus mitmete osakondade jaoks t\u00f6\u00f6tada v\u00f5tmetega, mis asuvad tokenites (praegu on k\u00fcsimus f\u00fc\u00fcsiliste v\u00f5tmete arvu osas veel avatud).<\/p>\n

Kuna madalaimad kulud (tasuta) t\u00f5id kohe valiku usbip<\/a><\/noindex>. Server Ubintu 18.04-is hakkas t\u00f6\u00f6tama t\u00e4nu avaldamisele Taltsutame USB\/IP<\/a><\/noindex> ja on edukalt testitud mitmete m\u00e4lupulkade peal (sel hetkel polnud tokenit). \u00dckski m\u00e4rkimisv\u00e4\u00e4rne probleem, v\u00e4lja arvatud monopolne valdamine (kasutaja broneerimine), pole sel hetkel ilmnenud. Selge, et juurdep\u00e4\u00e4su korraldamiseks mitmele kasutajale (v\u00e4hemalt kahele, alguses) on vajalik nende juurdep\u00e4\u00e4su jagamine ajaliselt ja sundimine t\u00f6\u00f6tama kordam\u00f6\u00f6da.<\/p>\n

K\u00fcsimus tekkis: Kuidas k\u00f5ige v\u00e4hem vaeva n\u00e4ha, et k\u00f5igil k\u00f5ik t\u00f6\u00f6taks\u2026
\n<\/a><\/noindex><\/p>\n

J\u00fcri variant<\/h1>\n

<\/p>\n

\"\u00dchise
\nEsimene variant.<\/b>M\u00f5ned otseteed bat-failidele, nimelt
\na) Juurdep\u00e4\u00e4suv\u00f5tme \u00fchendamine.
\nb) Teadlik v\u00e4ljal\u00fclitamine. <\/p>\n

Punkt «b<\/b>» vaieldav, seet\u00f5ttu otsustati anda t\u00f6\u00f6ks v\u00f5tme jaoks 3 minutit.<\/p>\n

Usbip kliendi erip\u00e4ra on see, et p\u00e4rast selle k\u00e4ivitamist j\u00e4\u00e4b see konsooli rippuma, ilma, et konsooli seanssi katkestades saaks \u00fchenduse \"j\u00e4medalt\" katkestada kasutaja v\u00f5i serveri poolt.<\/p>\n

\n Siin on see, mis meil korralikult t\u00f6\u00f6tas:<\/p>\n

esimene: \u00fchendamine on.bat<\/i><\/b> <\/p>\n

usbip -a 172.16.12.26 4-1\nmsg * \"Allkiri\/token on puudulik v\u00f5i h\u00f5ivatud \"<\/code><\/pre>\n
teine: v\u00e4ljal\u00fclitamine off.bat<\/i><\/b><\/p>\n
ping 127.0.0.1 -n 180\ntaskkill \/IM usbip.exe \/F<\/code><\/pre>\n
\nKasutaja teadlikkuse peale lootes, skriptid \u00fchendati token.bat<\/i><\/b><\/p>\n
on.bat | off.bat<\/code><\/pre>\n
\nMida saab kokkuv\u00f5tlikult \u00f6elda: k\u00f5ik failid asuvad \u00fches kaustas, k\u00e4ivitamine failiga token.bat, kui kasutaja \u00fchendus katkeb, siis kohe teadet v\u00f5tme k\u00e4ttesaamatuse kohta, muul juhul alles p\u00e4rast 180 pingitust. Antud koodijupile saab lisada «@ECHO OFF» ja suunata konsooli «> nul» suunas, et kasutajat mitte v\u00e4ga \u0161okeerida, kuid testimiseks pole see vajalik. Esmane \"proov\" USB m\u00e4lu peal n\u00e4itas, et k\u00f5ik k\u00e4itub ootusp\u00e4raselt-usaldusv\u00e4\u00e4rselt-selgelt. Ja serveri poolt ei ole mingeid manipulatsioone vaja.<\/p>\n
\"\u00dchise
\n
\nMuidugi, kui t\u00f6\u00f6tada otse tokeniga, l\u00e4ks k\u00f5ik mitte nii, nagu oodati: f\u00fc\u00fcsilise \u00fchenduse korral seadmehalduses registreeritakse token kahena (WUDF ja nutikaart), kuid v\u00f5rgu\u00fchenduse korral ainult kui WUDF (kuigi PIN-koodi taotlemiseks on seda piisavalt).<\/p>\n
\"\u00dchise
\n
\nTuli v\u00e4lja, et karm \u201etaskkill\u201d ei ole \u00fcldse nii ranged ning \u00fchenduse l\u00f5petamine kliendil on probleemne ja isegi kui see \u00f5nnestub, ei garanteeri see, et see serveris l\u00f5petatakse.<\/p>\n
Loovutades k\u00f5ik konsoolid kliendilt, sai teine skript j\u00e4rgmise kuju:<\/p>\n
ping 127.0.0.1 -n 180 > nul\ntaskkill \/IM usbip.exe \/F \/T > nul\nping 127.0.0.1 -n 10 > nul\ntaskkill \/IM conhost.exe \/F \/T > nul<\/code><\/pre>\n
\nkuigi selle efektiivsus on v\u00e4hem kui 50%, kuna server p\u00fcsivalt arvas, et \u00fchendus ei ole l\u00f5petatud.<\/p>\n
Probleemid \u00fchendusega tekitasid m\u00f5tteid serveriosa uuendamisest.<\/p>\n
Serveri osa<\/h1>\n
\nMida on vaja:<\/p>\n
    \n
  1. Eemalda mitteaktiivsed kasutajad teenusest.<\/li>\n
  2. N\u00e4ha, kes praegu kasutab (v\u00f5i on veel h\u00f5ivatud) tokenit.<\/li>\n
  3. N\u00e4ha, kas token on arvuti k\u00fclge \u00fchendatud.<\/li>\n<\/ol>\n
    \nNende \u00fclesannete lahendamine otsustati kasutada crontab ja apache teenuseid. Koormuse suurenemise j\u00e4lgimise tulemuste 2. ja 3. punkti seisundite vahetamise diskreetne iseloom n\u00e4itab, et failis\u00fcsteemi saab paigutada ramdrive'i. \/etc\/fstab on lisatud rida <\/p>\n
    tmpfs   \/ram_drive      tmpfs   defaults,nodev,size=64K         0       0\n<\/code><\/pre>\n
    \nJuurekausta on loodud script kaust skriptidega: usb_restart.sh tokeni desaktiveerimine-aktiveerimine <\/p>\n
    usbip unbind -b 1-2\nsleep 2\nusbip bind -b 1-2\nsleep 2\nusbip attach --remote=localhost --busid=1-2\nsleep 2\nusbip detach --port=00<\/code><\/pre>\n
    \naktiveeritud seadmete loendi saamine usblist_id.sh<\/p>\n
    usbip list -r 127.0.0.1 | grep ':' | awk -F \":\" '{print $1}' | sed s\/' '\/\/g | grep -v \"^$\" > \/ram_drive\/usb_id.txt<\/code><\/pre>\n
    \naktiveeritud IP-aadresside loendi saamine (hilisemate t\u00e4iustustega kasutajaidentifikaatorite kuvamiseks) usbip_client_ip.sh<\/p>\n
    netstat -an | grep :3240 | grep ESTABLISHED | awk '{print $5}' | cut -f1 -d\":\" > \/ram_drive\/usb_ip_cli.txt<\/code><\/pre>\n
    \nise crontab n\u00e4eb v\u00e4lja selline:<\/p>\n
    *\\\/5 * * * * \/!script\/usb_restart.sh > \/dev\/null 2>&1\n* * * * * ( sleep 30 ; \/!script\/usblist_id.sh > \/dev\/null)\n* * * * * (sleep 10 ; \/!script\/usbip_client_ip.sh > \/dev\/null)<\/code><\/pre>\n
    \nNii et meil on: iga 5 minuti j\u00e4rel saab \u00fchenduda uus kasutaja, s\u00f5ltumata sellest, kes tokeniga t\u00f6\u00f6tas. HTTP-serveriga on s\u00fcmboolse lingina \u00fchendatud kaust \/ramdrive, milles hoitakse 2 tekstifaili, mis n\u00e4itavad serveri usbip olekut.<\/p>\n
    J\u00e4rgnev osa: \u201eInetu pakendis\u201d<\/h1>\n
    \nII variant.<\/b> Veidi r\u00f5\u00f5mustada kasutajat mingisuguse v\u00e4hem hirmutava liidese abil. M\u00f5eldes sellele, et kasutajatel on erinevad Windowsi versioonid koos erinevate raamistikudega ja erinevate \u00f5igustega, ei leidnud ma v\u00e4hem problemaatilist l\u00e4henemist kui Lazarus<\/a><\/noindex> ma ei leidnud (ma olen C# poolt, aga mitte sel juhul). Bat-failide k\u00e4ivitamine liidesest on v\u00f5imalik ka taustal, minimeeritud, kuid ilma korraliku katsetamiseta, isiklikult arvan, et parem on visualiseerida kasutajate rahulolematuse kogumiseks.<\/p>\n
    \"\u00dchise
    \n
    \nLiidese ja tarkvarasaidi kaudu lahendati j\u00e4rgmised \u00fclesanded:<\/p>\n
      \n
    1. N\u00e4idata, kas token on hetkel h\u00f5ivatud.<\/li>\n
    2. Esimesel k\u00e4ivitamisel toimub algne seadistus, genereerides \"\u00f5igeid\" bat-faile, mis teostavad sessioonide k\u00e4ivitamise ja katkestamise tokeni serveriga. Edasistes k\u00e4ivitustes \u0440\u0435\u0430\u043b\u0438\u0437atsioon 'teenusere\u017eiimis' parooli p\u00f5hjal.<\/li>\n
    3. Kontrollitakse serveriga \u00fchenduse olemasolu, mille tulemuste p\u00f5hjal k\u00fcsitakse serverit selle h\u00f5ivatuse kohta v\u00f5i v\u00e4ljastatakse teated probleemidest. \u00dchenduse taastumisel hakkab programm automaatselt t\u00f6\u00f6le tavare\u017eiimis.<\/li>\n<\/ol>\n
      \nT\u00f6\u00f6d tehakse veebiserveriga, kasutades lisamoodulit fphttpclient.<\/p>\n
      \r\n        \"M\u00e4ngi\r\n        
      <\/div>\r\n    <\/div><\/center>
      \n      siin on link praegusele kliendi versioonile<\/a><\/noindex><\/p>\n
      on olemas ka j\u00e4tk m\u00f5tetele artikli teemal, nagu ka osaline algne entusiasmi toode VirtualHere omaduste \u00fcle\u2026
      \n
      Allikas:       habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
      \u0412 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0437\u0430\u043a\u043e\u043d\u043e\u0434\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0434\u043e\u0432\u0435\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u0443\u0433 ( \u00ab\u041f\u0440\u043e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0435 \u0434\u043e\u0432\u0435\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0441\u043b\u0443\u0433\u0438\u00bb \u0423\u043a\u0440\u0430\u0438\u043d\u0430), \u043d\u0430 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u0438 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c \u043e\u0442\u0434\u0435\u043b\u0430\u043c \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0441 \u043a\u043b\u044e\u0447\u0430\u043c\u0438, \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 \u0442\u043e\u043a\u0435\u043d\u0430\u0445 (\u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442, \u0432\u043e\u043f\u0440\u043e\u0441 \u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0435 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439 \u0435\u0449\u0435 \u043e\u0442\u043a\u0440\u044b\u0442). \u041a\u0430\u043a \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441 \u043d\u0430\u0438\u043c\u0435\u043d\u044c\u0448\u0438\u043c\u0438 \u0437\u0430\u0442\u0440\u0430\u0442\u0430\u043c\u0438 (\u0431\u0435\u0437\u0432\u043e\u0437\u043c\u0435\u0437\u0434\u043d\u043e) \u0441\u0440\u0430\u0437\u0443 \u0432\u044b\u0431\u043e\u0440 \u043f\u0430\u043b \u043d\u0430 usbip. \u0421\u0435\u0440\u0432\u0435\u0440 \u043d\u0430 Ubintu 18.04 \u0437\u0430\u0440\u0430\u0431\u043e\u0442\u0430\u043b \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0423\u043a\u0440\u043e\u0449\u0430\u0435\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":29176,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-38891","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u00dchine v\u00f5rguningimine kr\u00fcptograafilise tokeni kasutajatele usbip baasil | ProHoster","description":"Seoses seadusandlikke muudatustega usaldusteenuste osas (\"Elektrooniliste usaldusteenuste seadus\" Ukraina), on ettev\u00f5ttes tekkinud vajadus mitmel osakonnal t\u00f6\u00f6tada v\u00f5tmetega, mis asuvad.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/sovmestnoe-setevoe-ispolzovanie-kriptograficheskogo-tokena-polzovatelyami-na-baze-usbip","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0435 \u0441\u0435\u0442\u0435\u0432\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0442\u043e\u043a\u0435\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u043d\u0430 \u0431\u0430\u0437\u0435 usbip | ProHoster","og:description":"\u0412 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0437\u0430\u043a\u043e\u043d\u043e\u0434\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0434\u043e\u0432\u0435\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u0443\u0433 ( \u00ab\u041f\u0440\u043e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0435 \u0434\u043e\u0432\u0435\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0441\u043b\u0443\u0433\u0438\u00bb \u0423\u043a\u0440\u0430\u0438\u043d\u0430), \u043d\u0430 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u0438 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c \u043e\u0442\u0434\u0435\u043b\u0430\u043c \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0441 \u043a\u043b\u044e\u0447\u0430\u043c\u0438, \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u043c\u0438 \u043d\u0430.","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/sovmestnoe-setevoe-ispolzovanie-kriptograficheskogo-tokena-polzovatelyami-na-baze-usbip","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:26:35+00:00","article:modified_time":"2019-10-31T19:26:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38891","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 23:51:37","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:00:28","updated":"2026-01-23 23:51:37","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/38891","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=38891"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/38891\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/29176"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=38891"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=38891"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=38891"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}