I-ProHoster > Π‘Π»ΠΎΠ³ > Ukuphatha > Ukwabelana kwenethiwekhi kwethokheni ye-cryptographic phakathi kwabasebenzisi abasuselwe ku-usbip

Ukwabelana kwenethiwekhi kwethokheni ye-cryptographic phakathi kwabasebenzisi abasuselwe ku-usbip

Mayelana nezinguquko emthethweni mayelana nezinsizakalo zokuthembela ("Mayelana nezinsizakalo ze-electronic trust" Ukraine), inkampani inesidingo seminyango eminingana ukuze isebenze nezihluthulelo ezitholakala kumathokheni (okwamanje, umbuzo wenombolo yokhiye we-hardware usavuliwe. ).

Njengethuluzi elinezindleko eziphansi (mahhala), ukukhetha kwawela ngokushesha usbip. Iseva eku-Ubintu 18.04 iqale ukusebenza ngenxa yokushicilelwa Ukulawula i-USB/IP futhi ihlolwe ngempumelelo kuma-flash drive amaningana (ngenxa yokuntuleka kwethokheni ngaleso sikhathi). Azikho izinkinga ezikhethekile ngaphandle kobunikazi obubodwa (ukubhuka komsebenzisi) ezihlonzwe ngaleso sikhathi. Kuyacaca ukuthi ukuze uhlele ukufinyelela kwabasebenzisi abaningana (okungenani ababili, ukuqala), kuyadingeka ukuhlukanisa ukufinyelela kwabo ngesikhathi futhi ubaphoqe ukuthi basebenze ngokushintshana.

Umbuzo wawuthi: Ngingakwenza kanjani ngomdanso omncane ukuze yonke into isebenzele wonke umuntu...

Ingxenye ayilungile

Ukwabelana kwenethiwekhi kwethokheni ye-cryptographic phakathi kwabasebenzisi abasuselwe ku-usbip
Inketho XNUMX. Izinqamuleli ezimbalwa zokushaya amafayela, okungukuthi
a) Ukuxhuma ukhiye wokungena.
b) Ukunqamula ngamabomu.

Isigaba "Π±Β» okunempikiswano, ngakho-ke kwanqunywa ukunikeza isikhathi sokusebenza nokhiye emizuzwini emi-3.

Okuhlukile kweklayenti le-usbip ukuthi ngemuva kokwethulwa, lihlala lilenga kukhonsoli; ngaphandle kokuphazamisa iseshini ye-console, ungavala ukuxhumana "cishe" ukusuka ohlangothini lweklayenti futhi nakuhlangothi lweseva.

Nakhu okusisebenzele kahle:

okokuqala: ukuxhumana ku.bat 

usbip -a 172.16.12.26 4-1
msg * "Подпись/Ρ‚ΠΎΠΊΠ΅Π½ нСдоступны ΠΈΠ»ΠΈ заняты "

okwesibili: ukuvala shaqa off.bat

ping 127.0.0.1 -n 180
taskkill /IM usbip.exe /F

Ngaphandle kokuncika ekwazini komsebenzisi, imibhalo yahlanganiswa yaba uphawu.bat

on.bat | off.bat

Kwenzekani: wonke amafayela akwifolda efanayo, eqaliswe ifayela le-token.bat, uma uxhumano luvaliwe umsebenzisi uthola ngokushesha umlayezo mayelana nokhiye ongatholakali, kwelinye icala, kuphela ngemva kwama-pings angu-180. Imigqa yekhodi engenhla ingahlonyiswa ngokuthi "@ECHO OFF" kanye nesiqondiso sekhonsoli ku-"> nul" ukuze ungashaqisi umsebenzisi kakhulu, kodwa akudingekile ukuqhuba ukuhlola. "Ukugijima" kokuqala kudrayivu ye-USB kubonise ukuthi yonke into yayibikezelwe, ithembekile, futhi icacile. Ngaphezu kwalokho, akukho ukukhohlisa okudingekayo ohlangothini lweseva.

Ukwabelana kwenethiwekhi kwethokheni ye-cryptographic phakathi kwabasebenzisi abasuselwe ku-usbip

Ngokwemvelo, lapho usebenza ngokuqondile nethokheni, konke akuzange kuhambe njengoba kulindelekile: ngokuxhumeka ngokomzimba kumphathi wedivayisi, ithokheni ibhaliswe njengamadivayisi we-2 (WUDF kanye nekhadi elihlakaniphile), futhi ngokuxhumeka kwenethiwekhi kuphela njenge-WUDF (nakuba lokhu kwanele ukucela i-PIN khodi).

Ukwabelana kwenethiwekhi kwethokheni ye-cryptographic phakathi kwabasebenzisi abasuselwe ku-usbip

Kubuye kuvele ukuthi "i-taskkill" enonya ayinzima kangako, futhi ukuvala uxhumano kuklayenti kuyinkinga futhi noma ngabe iphumelele, akuqinisekisi ukuyivala kuseva.

Ngemva kokudela wonke ama-consoles kuklayenti, iskripthi sesibili sathatha ifomu:

ping 127.0.0.1 -n 180 > nul
taskkill /IM usbip.exe /F /T  > nul
ping 127.0.0.1 -n 10 > nul
taskkill /IM conhost.exe /F /T  > nul

nakuba ukusebenza kwayo kungaphansi kuka-50%, njengoba iseva yaqhubeka inkani icabangela ukuxhumeka kuvuliwe.

Izinkinga ngoxhumano ziholele emicabangweni mayelana nokuthuthukisa uhlangothi lweseva.

Ingxenye yeseva

Okudingayo:

  1. Nqamula abasebenzisi abangasebenzi kusevisi.
  2. Bona ukuthi ubani okwamanje osebenzisa (noma osaboleka) ithokheni.
  3. Bona ukuthi ithokheni ixhunywe kukhompuyutha ngokwayo.

Lezi zinkinga zaxazululwa kusetshenziswa izinsizakalo ze-crontab ne-apache. Imvelo ehlukahlukene yokubhala kabusha isimo semiphumela yokuqapha yamaphuzu 2 no-3 esithakaselayo ibonisa ukuthi isistimu yefayela ingatholakala ku-ramdrive. Kwengezwe umugqa ku-/etc/fstab 

tmpfs   /ram_drive      tmpfs   defaults,nodev,size=64K         0       0

Ifolda yombhalo enemibhalo idaliwe empandeni: ukwehlisa-ukukhweza ithokheni usb_restart.sh 

usbip unbind -b 1-2
sleep 2
usbip bind -b 1-2
sleep 2
usbip attach --remote=localhost --busid=1-2
sleep 2
usbip detach --port=00

ukuthola uhlu lwamadivayisi asebenzayo usblist_id.sh

usbip list -r 127.0.0.1 | grep ':' |awk -F ":" '{print $1}'| sed s/' '//g | grep -v "^$" > /ram_drive/usb_id.txt

ukuthola uhlu lwama-IP asebenzayo (nokuguqulwa okulandelayo ukuze kuboniswe ama-ID wabasebenzisi) usbip_client_ip.sh

netstat -an | grep :3240 | grep ESTABLISHED|awk '{print $5}'|cut -f1 -d":" > /ram_drive/usb_ip_cli.txt

i-crontab ngokwayo ibukeka kanje:

*/5 * * * * /!script/usb_restart.sh > /dev/null 2>&1
* * * * * ( sleep 30 ; /!script/usblist_id.sh > /dev/null)
* * * * * (sleep 10 ; /!script/usbip_client_ip.sh > /dev/hull)

Ngakho sinakho: njalo ngemizuzu emi-5 umsebenzisi omusha angaxhuma, kungakhathaliseki ukuthi ubani osebenze nethokheni. Ifolda /ramdrive ixhunywe kuseva ye-http kusetshenziswa i-symlink, lapho kugcinwa khona amafayela ombhalo ama-2, okubonisa isimo seseva ye-usbip.

Ingxenye elandelayo: "Kubi ku-wrapper"

Inketho II. Ukujabulisa umsebenzisi kancane okungenani ngesixhumi esibonakalayo esingasabisi kangako. Ixakwe ukuthi abasebenzisi banezinguqulo ezihlukene zeWindows ezinezinhlaka ezihlukene, amalungelo ahlukene, indlela engenankinga kakhulu kune Lazarus Angizange ngiyithole (impela ngiyi-C #, kodwa hhayi kuleli cala). Ungavula amafayela we-bat kusuka kusixhumi esibonakalayo ngemuva, encishisiwe, kodwa ngaphandle kokuhlolwa okufanele, mina ngokwami ​​nginombono: udinga ukukubona ngeso lengqondo ukuze uqoqe ukunganeliseki komsebenzisi.

Ukwabelana kwenethiwekhi kwethokheni ye-cryptographic phakathi kwabasebenzisi abasuselwe ku-usbip

Imisebenzi elandelayo ixazululwe yi-interface nesofthiwe:

  1. Ibonisa ukuthi ithokheni imatasatasa yini okwamanje.
  2. Ekuqalisweni kokuqala, ukusetha kokuqala kuhilela ukukhiqiza amafayela e-bat β€œalungile” asebenzisa ukwethulwa nokuphazamiseka kweseshini ngeseva yethokheni. Ekuqaliseni okulandelayo, ukusetshenziswa kwemodi "yesevisi" kusetshenziswa iphasiwedi.
  3. Ihlola ubukhona bokuxhumana neseva, ngenxa yalokho ihlola ukuthi imatasa noma ibonisa imilayezo emayelana nezinkinga. Uma ukuxhumana kuqalwa kabusha, uhlelo luqala ngokuzenzakalelayo ukusebenza ngemodi evamile.

Ukusebenza neseva ye-WEB kusetshenziswa i-fphttpclient snap-in eyengeziwe.


lapha kuzoba nesixhumanisi senguqulo yamanje yeklayenti

kukhona futhi ukucatshangelwa okwengeziwe ngendaba ye-athikili, kanye nomdlandla omncane wokuqala womkhiqizo we-VirtualHere onezici zawo...

Source: www.habr.com

Engeza amazwana