Ukwabelana ngenethiwekhi ye-cryptographic token phakathi kwabasebenzisi abasekwe kwi-usbip

Ngokuphathelele utshintsho kumthetho malunga neenkonzo zokuthembela ("Mayela neenkonzo ze-electronic trust" eUkraine), ishishini linesidingo sokuba amasebe amaninzi asebenze kunye nezitshixo ezibekwe kwiithokheni (okwangoku, umbuzo wenani lezitshixo ze-hardware usavuliwe. ).

Njengesixhobo esinexabiso eliphantsi (ngaphandle kwentlawulo), ukhetho lwawela ngokukhawuleza usbip. Iseva kwi-Ubintu 18.04 iqale ukusebenza ngokubulela kupapasho Ukulawula i-USB/IP kwaye ivavanywe ngempumelelo kwii-flash drives ezininzi (ngenxa yokungabikho kwethokheni ngelo xesha). Akukho zingxaki zikhethekileyo ngaphandle kobunini bemonopoly (ugcino lomsebenzisi) zachongwa ngelo xesha. Kucacile ukuba ukwenzela ukulungelelanisa ukufikelela kubasebenzisi abaninzi (ubuncinci ababini, ukuqala), kuyimfuneko ukwahlula ukufikelela kwabo ngexesha kwaye banyanzelise ukuba basebenze ngokutshintshana.

Umbuzo wawusithi: Ndingayenza njani ngomdaniso omncinci ukuze yonke into isebenzele wonke umntu...

Inxalenye ayilunganga

Ukwabelana ngenethiwekhi ye-cryptographic token phakathi kwabasebenzisi abasekwe kwi-usbip
Ukhetho loku-1. Iindlela ezimfutshane ezininzi kwiifayile ze-bat, ezizezi
a) Ukuqhagamshela iqhosha lofikelelo.
b) Ukuqhawula ngabom.

Umhlathi "Π±Β»ingxabano, ngoko ke kwagqitywa ukunika ixesha lokusebenza ngesitshixo kwimizuzu emi-3.

Ubunqabileyo bomthengi we-usbip kukuba emva kokuba iqalisiwe, ihlala ijinga kwi-console;

Nantsi into esisebenzele kakuhle:

kuqala: uxhumano kwi.bat

usbip -a 172.16.12.26 4-1
msg * "Подпись/Ρ‚ΠΎΠΊΠ΅Π½ нСдоступны ΠΈΠ»ΠΈ заняты "

okwesibini: ukuvala off.bat

ping 127.0.0.1 -n 180
taskkill /IM usbip.exe /F

Ngaphandle kokuxhomekeka kulwazi lomsebenzisi, izikripthi zadityaniswa uphawu.bat

on.bat | off.bat

Kwenzeka ntoni: zonke iifayile zikwifolda efanayo, iqaliswe yifayile ye-token.bat, ukuba uxhulumaniso luvaliwe umsebenzisi ngokukhawuleza ufumana umyalezo malunga nesitshixo esingafumanekiyo, kwenye imeko, emva kwe-180 pings. Imigca enikiweyo yekhowudi inokuxhotyiswa nge "@ECHO OFF" kunye nesalathiso se-console ukuya "> nul" ukuze ungothuki kakhulu umsebenzisi, kodwa akuyimfuneko ukuqalisa ukuvavanya. "Ukuqhuba" kokuqala kwidrayivu ye-USB kubonise ukuba yonke into yayiqikeleleka, ithembekile, kwaye icacile. Ngaphaya koko, akukho kusetyenziswa kufunwayo kwicala lomncedisi.

Ukwabelana ngenethiwekhi ye-cryptographic token phakathi kwabasebenzisi abasekwe kwi-usbip

Ngokwemvelo, xa usebenza ngokuthe ngqo kunye nomqondiso, yonke into ayizange ihambe njengoko kulindelwe: kunye noxhumo lomzimba kumphathi wesixhobo, ithokheni ibhaliswe njengezixhobo ezi-2 (i-WUDF kunye nekhadi elihlakaniphile), kunye noqhagamshelwano lwenethiwekhi kuphela njengeWUDF (nangona kunjalo oku kwanele ukucela ikhowudi ye-PIN).

Ukwabelana ngenethiwekhi ye-cryptographic token phakathi kwabasebenzisi abasekwe kwi-usbip

Kwakhona kuvela ukuba "i-taskkill" ekhohlakeleyo ayinzima kangako, kwaye ukuvala uxhulumaniso kumxhasi kuyingxaki kwaye nokuba kuphumelele, akuqinisekisi ukuvala kuye kumncedisi.

Emva kokuncama zonke izinto ezithuthuzelayo kumxhasi, iskripthi sesibini sithathe ifom:

ping 127.0.0.1 -n 180 > nul
taskkill /IM usbip.exe /F /T  > nul
ping 127.0.0.1 -n 10 > nul
taskkill /IM conhost.exe /F /T  > nul

nangona ukusebenza kwayo kungaphantsi kwe-50%, ukususela ekubeni umncedisi waqhubeka ngobunkani eqwalasela uqhagamshelwano oluvulekileyo.

Iingxaki ngoqhagamshelo zikhokelele kwiingcamango malunga nokuphuculwa kwecala lomncedisi.

Inxalenye yeseva

Yintoni oyifunayo:

  1. Nqamula abasebenzisi abangasebenziyo kwinkonzo.
  2. Jonga ukuba ngubani osebenzisa ngoku (okanye usaboleka) uphawu.
  3. Jonga ukuba ithokheni iqhagamshelwe kwikhompyuter ngokwayo.

Ezi ngxaki zasonjululwa kusetyenziswa i-crontab kunye neenkonzo ze-apache. Ubume obucacileyo bokubhala kwakhona imeko yeziphumo zokubeka iliso zamanqaku 2 kunye ne-3 esinomdla kuthi ibonisa ukuba inkqubo yefayile inokufumaneka kwi-ramdrive. Umgca wongezwe kwi /etc/fstab

tmpfs   /ram_drive      tmpfs   defaults,nodev,size=64K         0       0

Incwadi eneenkcukacha yescript enezikripthi yenziwe kwingcambu: ukunganyuki-ukunyusa umqondiso usb_restart.sh

usbip unbind -b 1-2
sleep 2
usbip bind -b 1-2
sleep 2
usbip attach --remote=localhost --busid=1-2
sleep 2
usbip detach --port=00

ukufumana uluhlu lwezixhobo ezisebenzayo usblist_id.sh

usbip list -r 127.0.0.1 | grep ':' |awk -F ":" '{print $1}'| sed s/' '//g | grep -v "^$" > /ram_drive/usb_id.txt

ukufumana uluhlu lwee-IP ezisebenzayo (kunye nokuguqulwa okulandelayo ukubonisa ii-ID zabasebenzisi) usbip_client_ip.sh

netstat -an | grep :3240 | grep ESTABLISHED|awk '{print $5}'|cut -f1 -d":" > /ram_drive/usb_ip_cli.txt

i-crontab ngokwayo ibonakala ngolu hlobo:

*/5 * * * * /!script/usb_restart.sh > /dev/null 2>&1
* * * * * ( sleep 30 ; /!script/usblist_id.sh > /dev/null)
* * * * * (sleep 10 ; /!script/usbip_client_ip.sh > /dev/hull)

Ngoko sinakho: yonke imizuzu emi-5 umsebenzisi omtsha unokudibanisa, kungakhathaliseki ukuba ngubani osebenze kunye nomqondiso. I/ramdrive ifolda iqhagamshelwe kumncedisi we-http usebenzisa i-symlink, apho iifayile ezibhaliweyo ezi-2 zigcinwa khona, ebonisa isimo somncedisi we-usbip.

Inxalenye elandelayo: "Imbi kwisigqubuthelo"

Ukhetho II. Ukukholisa umsebenzisi kancinci ngojongano oluncinci oloyikisayo. Ibhidekile yinto yokuba abasebenzisi baneenguqulelo ezahlukeneyo zeWindows ezinezakhelo ezahlukeneyo, amalungelo ahlukeneyo, indlela engenangxaki kuneyo. ULazaro Andizange ndiyifumane (ndiyi-C #, kodwa kungekhona kule meko). Ungaqhuba iifayile ze-bat ukusuka kwi-interface yangasemva, incitshisiwe, kodwa ngaphandle kovavanyo olufanelekileyo, mna ngokwam ndinombono: kufuneka uyibone ngeso lengqondo ukuqokelela ukunganeliseki komsebenzisi.

Ukwabelana ngenethiwekhi ye-cryptographic token phakathi kwabasebenzisi abasekwe kwi-usbip

Le misebenzi ilandelayo yasonjululwa lujongano kunye nesoftware:

  1. Ibonisa ukuba umqondiso uxakekile.
  2. Ekuqalisweni kokuqala, ukuseta kokuqala kubandakanya ukuvelisa iifayile ze-bat "ezichanekileyo" ezizalisekisa ukuqaliswa kunye nokuphazamiseka kweseshoni kunye nomncedisi wethokheni. Ekuqalweni okulandelayo, ukuphunyezwa kwendlela "yenkonzo" usebenzisa igama lokugqitha.
  3. Ukukhangela ubukho boxhulumaniso kunye nomncedisi, ngenxa yoko ihlola ukuba ixakekile okanye ibonisa imiyalezo malunga neengxaki. Xa unxibelelwano luqaliswa kwakhona, inkqubo iqala ngokuzenzekelayo ukusebenza kwimodi eqhelekileyo.

Ukusebenza ngomncedisi we WEB kuphunyezwe kusetyenziswa i-fphttpclient eyongezelelweyo ye-snap-in.


apha izakuba likhonkco kuguqulelo lwangoku lomxhasi

kukwakho nokuqwalaselwa okungaphaya kumxholo wenqaku, kunye nentshiseko yokuqala engaphelelanga yemveliso yeVirtualHere eneempawu zayo...

umthombo: www.habr.com

Yongeza izimvo