1. ftp服务器安装
sudo apt-get update
sudo apt-get install vsftpd
vsftpd -v // 检查是否安装成功,版本号 vsftpd: version 3.0.3
2. ftp服务器配置方法一
参考:https://blog.csdn.net/always_and_forever_/article/details/81357261
匿名登录
- 准备工作
- 创建ftp服务器目录
mkdir ~/ftp
- 进入ftp目录,新建目录anonymous,用来存放用户上传的文件,并修改目录权限
cd ~/ftp
mkdir anonymous
chmod 777 anonymous
- 在ftp目录下创建一个普通文件,用来做下载测试,如test:
touch test
vim test // 内容随便 helloworld
- vsftpd.conf配置
sudo vim /etc/vsftpd.conf
设置如下,允许匿名用户登录
anonymous_enable=YES
anon_root=/home/……/ftp
no_anon_password=YES
write_enable=YES
anon_upload_enable=YES
anon_mkdir_write_enable=YES
保存退出。
- 重启服务器,重新加载/etc/vsftpd.conf配置文件
sudo systemctl restart vsftpd
或者 sudo service vsftpd restart
或者 sudo /etc/init.d/vsftpd restart
3. ftp服务器配置方法二
参考:https://blog.csdn.net/qq_30034029/article/details/82727658#commentBox
指定用户名登录
- vsftpd.conf配置
listen=NO //是否开启监听ipv4和ipv6数据
listen_ipv6=YES //是否开启监听ipv6数据
# Allow anonymous FTP? (Disabled by default).
anonymous_enable=NO //是否允许匿名登陆,无需密码
# Uncomment this to allow local users to log in.
local_enable=YES //是否允许本地用户登录
# Uncomment this to enable any form of FTP write command.
write_enable=YES //是否允许登陆者上传文件
# Default umask for local users is 077. You may wish to change this to 022,
# if your users expect that (022 is used by most other ftpd's)
local_umask=022 //设置本地用户默认要减免的权限
# Activate directory messages - messages given to remote users when they
# go into a certain directory.
dirmessage_enable=YES //目录消息,能够给远程登陆的用户发送目录
#
# If enabled, vsftpd will display directory listings with the time
# in your local time zone. The default is to display GMT. The
# times returned by the MDTM FTP command are also affected by this
# option.
use_localtime=YES //服务器所展示的目录将随着本地时间而改变
#
# Activate logging of uploads/downloads.
xferlog_enable=YES //开启上传下载的日志记录
#
# Make sure PORT transfer connections originate from port 20 (ftp-data).
connect_from_port_20=YES //确认连接传输的端口号为20
# You may override where the log file goes if you like. The default is shown
# below.
xferlog_file=/var/log/vsftpd.log //日志文件存放位置
#
# If you want, you can have your log file in standard ftpd xferlog format.
# Note that the default log file location is /var/log/xferlog in this case.
xferlog_std_format=YES //日志文件采用标准格式
# You may fully customise the login banner string:
ftpd_banner=Welcome to FTP service. //在使用shell时登陆那么会发送欢迎语
# You may specify an explicit list of local users to chroot() to their home
# directory. If chroot_local_user is YES, then this list becomes a list of
# users to NOT chroot().
# (Warning! chroot'ing can be very dangerous. If using chroot, make sure that
# the user does not have write access to the top level directory within the
# chroot)
chroot_local_user=YES //对本地用户是否实施限制
chroot_list_enable=YES //开启限制白名单
# (default follows)
chroot_list_file=/etc/vsftpd.chroot_list //白名单路径,若无这个文件需要自己创建
# This option should be the name of a directory which is empty. Also, the
# directory should not be writable by the ftp user. This directory is used
# as a secure chroot() jail at times vsftpd does not require filesystem
# access.
secure_chroot_dir=/var/run/vsftpd/empty
#
# This string is the name of the PAM service vsftpd will use.
# pam_service_name=vsftpd
pam_service_name=ftp //此处ubuntu的系统需要改为ftp
# This option specifies the location of the RSA certificate to use for SSL
# encrypted connections.
rsa_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem
rsa_private_key_file=/etc/ssl/private/ssl-cert-snakeoil.key
ssl_enable=NO
#
# Uncomment this to indicate that vsftpd use a utf8 filesystem.
utf8_filesystem=YES //编码统一为utf8编码,可以识别中文,防止乱码
- 创建ftp用户组和用户
sudo groupadd ftpusers //创建ftpusers用户组
sudo useradd -m ftpuser_lxr//创建一个用户并且自动创建家目录为/home/ftpuser_lxr
(第二种方式:mkdir /home/ftpuser_lxr //先创建家目录sudo userad -d /home/ftpuser_lxr ftpuser_lxr //绑定这个家目录)
usermod -G ftpusers ftpuser_lxr //将这个新用户加入到ftpusers用户组中
sudo passwd ftpuser_lxr //更改密码
mkdir /home/ftpuser_lxr/ftp //为用户添加一个具有一定权限的文件夹
chmod 777 -R /home/ftpuser_lxr/ftp //新建一个pub目录用于存放文件,并且赋予全部权限
usermod -s /sbin/nologin username //限制用户登录方式;限制用户username只能通过ftp登陆,而不能直接登陆服务器
- 将该用户加入vsftpd.chroot_list白名单中
mkdir /etc/vsftpd.chroot_list
vim vsftpd.chroot_list
#白名单
ftpuser_lxr
- 重启vsftpd服务
4. 测试
方法一: 在局域网另一台电脑浏览器地址输入:ftp://ftp_ip
即可看到ftp目录。(ftp_ip为服务器ip地址)
方法二: 终端输入ftp ftp_ip
- 上传:
put upload.txt
- 下载:
get download.txt
- 退出:
bye 或者 exit