Kungekudala Uphando usungule amanyathelo amabini ungqinisiso Kwinkqubo yakho ye-imeyile, sisicelo sokuvelisa ikhowudi enamanani ama-6 kwifowuni yakho ekuvumela ukuba ube nokuqinisekisa okuphindwe kabini ukufikelela kwi-imeyile ngendlela ekhuselekileyo, ngokuba nekhowudi yamanani engahleliyo etshintsha kwinqanaba elinye kunye Oku kufuneka kungeniswe emva kokufaka igama eligqithisiweyo lesiqhelo iphunyezwe ku-Ubuntu Ukuqinisekisa ukungena komsebenzisi ngamanyathelo amabini, isixhobo esiza kugcina ulwazi ngaphandle kwikhompyuter yakho nokuba bayayazi iphasiwedi yakho ephambili. |
Nalu isifundo esincinci sokwenza lo msebenzi:
Inyathelo 1: Faka isiQinisekisi sikaGoogle kwiselfowuni yakho
Khuphela isiQinisekisi sikaGoogle kwiselfowuni yakho. Kubasebenzisi be-Android ndishiya eli khonkco lilandelayo apha:
Isicelo sikwafumaneka kwi-Iphone kunye neBlackberry.
Inyathelo 2: Khuphela iphakheji ye-UBUNTU
Yongeza le PPA ilandelayo kuluhlu lwemithombo yephakheji ngokusebenzisa lo myalelo ungezantsi ukusuka kwikhonsoli:
Isongezo-sudo-apt-reppa ppa: isilelehel / izinzile
Inyathelo 3: Hlaziya uluhlu lwe-APP
Sebenzisa lo myalelo ulandelayo wokuhlaziya indawo yogcino lwePPA kwinkqubo yakho:
sudo apt-get update
Inyathelo 4: Faka imodyuli yePAM (Imodyuli yokuQinisekiswa okuQokelelweyo)
Yenza lo myalelo uqhotyoshelweyo, oku kuya kufaka iifayile ezimbini kwinkqubo yakho yokuseka amanyathelo amabini okuqinisekisa: /lib/security/pam_google_authenticator.so kunye / usr / bin / google-authenticator.
Sudo apt-fumana ukufaka i-libpam-google-eyiyo
Inyathelo 5: Qwalasela iakhawunti yokufikelela
Ngoku kuyafuneka ukuba uphumeze "google-umqinisekisi" ukusuka kwikhonsoli ukumisela iakhawunti ongene kuyo. Nje ukuba umthetho wenziwe, kuya kuvela ikhowudi ye-QR kwiscreen. Kuya kufuneka usebenzise usetyenziso (isiQinisekisi sikaGoogle) esifakwe kwiselfowuni yakho ukuze ukwazi ukufumana iikhowudi zokungqinisisa ezinxulumene nokungena kwakho.
Ndikucebisa ukwenza "ukuprinta isikrini" okanye umfanekiso wekhowudi ye-QR ukuze udibanise nezinye izixhobo kamva.
Inyathelo 6: Qwalasela i-PAM ukuze isebenzise ukungqinisisa kwezinto ezimbini.
Vula i-terminal kwaye ungeze lo mgca ulandelayo kwi /etc/pam.d/sudo fayile kwaye usebenzise Sudo vi okanye Sudo gvim ukwenza utshintsho:
Umbhali uyafuneka pam_google_authenticator.so
Vula i-terminal entsha kwaye usebenzise:
Isudo ls
Isistim iya kucela igama eligqithisiweyo kunye nesicelo se "Khowudi yokuqinisekisa:". Ngenisa iinombolo eziqwalaselweyo kwisiqinisekiso seGoogle kusetyenziso sakho.
Uya kuba nemizuzu emalunga nemithathu ukusuka kutshintsho lwekhowudi yamanani. Nokuba ikhowudi iyatshintsha, iya kuhlala isebenza imizuzu emibini eyongezelelweyo.
Ukuba konke kuhamba kakuhle, hlela ifayile /etc/pam.d/sudo kwakhona, ususe umgca owongeze "u-auth ofunekayo pam_google_authenticator.so", gcina kwaye uphume.
Ngoku ukufumana olona khuselo luphumezayo amanyathelo amabini okuqinisekisa ukongeza ngesudo vi, Sudo gvim okanye nawuphi na umhleli owuthandayo kodwa uhlala unesudo umgca «auth efunekayo pam_google_authenticator.so» kwifayile «/etc/pam.d/ umbhali »Kwaye ukusukela ngoku ukuya phambili nakuphi na ukungqinisisa kuya kufuna ukungqinisisa okuphindwe kabini.
Ukuba ufuna ukungathintelwa kangako ungasebenzisa nayiphi na enye ifayile kulawulo /etc/pam.d ulawulo, kuxhomekeke ekubeni zeziphi iimfuno zakho zokhuseleko.
Izimvo ezi-7, shiya ezakho
I-PPA ayisebenzi kum kwi-Mint XFCE.
Ndicinga ukuba kuya kufuneka silinde iintsuku ezimbalwa ukuze ifumaneke kule distro.
Ewe, kwimeko yakho, ndiyaqonda ukuba iya kuba yinto elula.
Xa kuziwa "ekuphazamiseni", yiyo loo nto ... umntu onolwazi oluncinci lobuchwephesha kwaye ngubani owaziyo ukuba yeyiphi ifayile ekufuneka eyijongile ingagqitha koko kubonakala ngathi kuyinkqubo enzima ngakumbi yokhuseleko. Oku, okoko lo mntu enokufikelela emzimbeni kwikhompyuter yakho. Ke ngoko, le nkqubo iluncedo kakhulu kwimeko apho kwenziwa ukungena okude, njengaxa usebenzisa sshd.
Masinwabe! UPawulos.
Kwifolda yam ye-pam.d kukho:
/etc/pam.d/lightdm
/etc/pam.d/kdm
(Ndisebenzisa Ubuntu 12.04 kwaye ndine-KDE efakiweyo, nangona idesktop yam inguGnome 3.4)
Kodwa xa ndongeza ugunyaziso alundivumeli ndingene, indixelela: "impazamo ebalulekileyo", kuye kwafuneka ndibashiye njengoko bebevela kwisiphelo sendlela kwi "Indlela yokubuyisela"
Eminye malunga ne-sshd ayicacanga kum, kodwa ingcebiso yokwenza inkqubo ukuba ikhuseleke ngakumbi kwaye ibe ncinane "engaphephekiyo" ingaluncedo kum. Ndisebenzisa iLinux malunga neminyaka emi-3 phakathi kwezizathu ezininzi zokuqina kwayo kunye nokhuseleko kwaye ndihlala ndikhangela indlela yokwenza yonke into ibenzima, ukongeza izendlalelo kunye nokhuseleko, njengoko benditshilo "ICEBISO" lokuba ungasisebenzisa njani isiqinisekiso esinezinyathelo ezi-2 Ubuntu buya kuba buhle. =)
Kuxhomekeka kwinkqubo oyisebenzisayo, iya kuba yenye yezi ndlela:
/etc/pam.d/gdm
/etc/pam.d/lightdm
/etc/pam.d/kdm
/etc/pam.d/lxdm
njalo
Kwakhona, mandicacise ukuba kunengqondo ngakumbi ukuyisebenzisa nge-sshd, umzekelo, kunokungena kwikhompyuter. Ngesizathu esilula sokuba isitshixo semfihlo sigcinwe kwifolda ekhayeni lakho ukuze umntu ofikelela kwikhompyuter yakho aqale kwi-livecd, ukope isitshixo kwaye uvelise ezabo iithokheni. Ewe kuyinyani ukuba "yenza izinto zibe nzima ngakumbi" kodwa ayisiyinkqubo inviolable ... nangona ipholile kakhulu.
Ingxaki efanayo ayinakubakho kwiinkqubo ezifuna ukungena kude, njenge-sshd.
Masinwabe! UPawulos.
Kulungile, yiyo loo nto, ukuba ndifuna ukwenza uqinisekiso ngamanyathelo ama-2 okungena ngemvume kwifayile endiyongeza kuyo "auth required pam_google_authenticator.so" kwi pam.d?
Enkosi ngesixhobo esihle!
ukuba iyasebenza, ndine-12.04 kwaye ndongeze i-PPA
I-PPA ayisebenzi ku-Ubuntu 12.04 Nasiphi na isisombululo?
Masinwabe