CentOS7环境下VsFTP搭建与配置(vuser正确配置)

1.使用yum安装vsftpd软件

~># sudo yum install ftp vsftpd libdb4 libdb4-utils

 

2.设置vsftpd开机启动

~># sudo systemctl enable vsftpd.service

~># sudo systemctl start vsftpd.service

~># sudo systemctl status vsftpd.service

 

3.修改vsftpd.conf文件(VsFTP匿名准许用户上传)

~># sudo touch vuser.txt

~># sudo vim vuser.txt

-------------------------

admin

admin

test

test

-------------------------

~># sudo db_load -T -t hash -f vuser.txt /etc/vsftpd/vuser_passwd.db

~># sudo chmod 600 /etc/vsftpd/vuser_passwd.db

~># sudo vim /etc/pam.d/vsftpd

-------------------------

#%PAM-1.0

auth required /lib64/security/pam_userdb.so db=/etc/vsftpd/vuser_passwd

account required /lib64/security/pam_userdb.so db=/etc/vsftpd/vuser_passwd

-------------------------

~># sudo vim /etc/vsftpd/vsftpd.conf

-------------------------

anonymous_enable=NO

 

xferlog_file=/var/log/vsftpd.log

 

ftpd_banner=Welcome to blah FTP service.

 

chroot_list_enable=YES

chroot_list_file=/etc/vsftpd/chroot_list

 

guest_enable=YES

guest_username=ftp

user_config_dir=/etc/vsftpd/vuser_conf

#virtual_use_local_privs=YES 此处注释，不然admin和test权限一样，2018.01.11处理

-------------------------

~># sudo touch /etc/vsftpd/chroot_list

~># sudo vim /etc/vsftpd/chroot_list

-------------------------

admin

test

-------------------------

~># sudo mkdir -p /var/www/ftp

~># sudo chown -R ftp:ftp /var/www/ftp

~># sudo chmod -R 777 /var/www/ftp

4.配置虚拟用户权限

~># sudo mkdir /etc/vsftpd/vuser_conf

~># sudo vim /etc/vsftpd/vuser_conf/admin

-------------------------

local_root=/var/www/ftp

write_enable=YES

anon_umask=022

anon_world_readable_only=NO

anon_mkdir_write_enable=YES

anon_upload_enable=YES

anon_other_write_enable=YES

allow_writeable_chroot=YES

-------------------------

~># sudo vim /etc/vsftpd/vuser_conf/test

-------------------------

local_root=/var/www/ftp

anon_world_readable_only=NO

allow_writeable_chroot=YES

-------------------------

 

5.重启vsftpd服务

~># sudo systemctl restart vsftpd.service

 

附录：

1.一定要关闭SELINUX;

2.简单配置VsFTP匿名准许用户上传:

~># vim /etc/vsftpd/vsftpd.conf

-------------------------

anon_umask=022

anon_root=/var/www/ftp

anon_max_rate=10485760

anon_upload_enable=YES

 

anon_mkdir_write_enable=YES

## anon_other_write_enable=YES

 

xferlog_file=/var/log/vsftpd.log

 

idle_session_timeout=600

data_connection_timeout=120

 

ascii_upload_enable=YES

ascii_download_enable=YES

 

ftpd_banner=Welcome to blah FTP service.

-------------------------