问题描述： 看下 1.1.1.1 的ftp为什么连不上 报错的信息: 'ftpServer' => '1.1.1.1', // FTP服务器地址 'ftpPort' => '21', 'ftpUsername' => 'admin.was.chinasoft.com', // FTP账号 'ftpPassword' => 'ftp_pass', 报错信息： FTP connection has failed!Attempted to connect to 1.1.1.1 for user admin.was.chinasoft.com 处理过程： 首先登录 1.1.1.1_server01_was_web01 这台网宿的服务器 1.查看进程是否正常 [root@server01:/usr/local/proftpd-1.3.6rc2]# ps -ef|grep ftp apache 44339 1 0 19:21 ? 00:00:00 proftpd: (accepting connections) apache 48010 44339 0 20:03 ? 00:00:00 proftpd: admin.was.chinasoft.com - 3.3.3.3: IDLE 2.连接21端口，看服务是否能够正常通讯 C:\Users\ws>telnet 2.2.2.2 21 3.找到/usr/local/proftpd-1.3.6rc2/的程序运行目录 [root@server01:/usr/local/proftpd-1.3.6rc2]# cd /usr/local/proftpd-1.3.6rc2/ [root@server01:/usr/local/proftpd-1.3.6rc2]# ll total 44 -rwxr-xr-x 1 root root 1053 Apr 6 2017 adduser_domain.sh -rwx------ 1 root root 1034 Apr 6 2017 adduser.sh drwxr-xr-x 2 root root 4096 Apr 11 2016 bin drwxr-xr-x 2 root root 4096 Jul 5 19:36 etc drwxr-xr-x 3 root root 4096 Apr 11 2016 include drwxr-xr-x 4 root root 4096 Apr 11 2016 lib drwxr-xr-x 2 root root 4096 Apr 11 2016 libexec -rwxr-xr-x 1 root root 2367 Mar 11 2013 proftpd.sh drwxr-xr-x 2 root root 4096 Apr 11 2016 sbin drwxr-xr-x 4 root root 4096 Apr 11 2016 share drwxr-xr-x 2 root root 4096 Jul 5 19:54 var # 添加用户的脚本(作废) [root@server01:/usr/local/proftpd-1.3.6rc2]# cat adduser.sh #!/bin/bash usage () { echo "" echo " Please Input Correct infomation!" echo "" echo " USAGE: `basename $0` username /dir ftp_server_ip" echo " Exp: `basename $0` Lee /data/lee/home 1.1.1.1,2.2.2.2" echo "" echo " Result:" echo " UserName: Lee" echo " UserHome: /data/lee/home" echo " PassWord: N1Jy3Fqol" echo "" } if [[ $3 == "" ]];then usage; exit 1; fi datetime=`date +%Y%m%d" "%H:%M:%S` userid=$1 passwd=`mkpasswd -l 9 -d 2 -c 3 -C 3 -s 0` home=$2 dst_passwd='{md5}'`/bin/echo -n "$passwd" | openssl dgst -binary -md5 | openssl enc -base64` shell='/sbin/nologin' accesshost=$3 /usr/local/mysql/bin/mysql -u ftp_user -p'pass' -h 192.168.1.189 -e "\ use ftp_db;insert into FTPUSERS VALUES('$userid','$dst_passwd',500,100,'$home','/sbin/nologin','$accesshost','$datetime');" echo "UserName: $userid" echo "PassWord: $passwd" echo "userHome: $home" echo "FTP IPs: $accesshost" echo "" # 添加用户和域名对应关系的脚本 [root@server01:/usr/local/proftpd-1.3.6rc2]# cat adduser_domain.sh #!/bin/bash usage () { echo "" echo " Please Input Correct infomation!" echo "" echo " USAGE: `basename $0` domainname ftp_server_ip" echo " Exp: `basename $0` www.test.com Server1,Server2" echo "" echo " Result:" echo " UserName: www.test.com" echo " PassWord: N1Jy3Fqol" echo "" } if [[ $2 == "" ]];then usage; exit 1; fi datetime=`date +%Y%m%d" "%H:%M:%S` userid=$1 passwd=`mkpasswd -l 9 -d 2 -c 3 -C 3 -s 0` domain=$userid if [[ $1 =~ ^www ]];then domain=${1#www.} fi dst_passwd='{md5}'`/bin/echo -n "$passwd" | openssl dgst -binary -md5 | openssl enc -base64` home="/data/www/vhosts/$domain" shell='/sbin/nologin' accesshost=$2 /usr/local/mysql/bin/mysql -u ftp_user -p'pass' -h 192.168.1.189 -e "\ use ftp_db;insert into FTPUSERS VALUES('$userid','$dst_passwd',500,100,'$home','/sbin/nologin','$accesshost','$datetime');" echo "UserName: $userid" echo "PassWord: $passwd" echo "FTP IPs: $accesshost" echo "" ***192.168.1.189这个mysql不存在 ③继续查看配置文件 [root@server01:/usr/local/proftpd-1.3.6rc2/etc]# cat /usr/local/proftpd-1.3.6rc2/etc/proftpd.conf # This is a basic ProFTPD configuration file (rename it to # 'proftpd.conf' for actual use. It establishes a single server # and a single anonymous login. It assumes that you have a user/group # "nobody" and "ftp" for normal operation and anon. ServerName "ProFTPD Default Installation" ServerType standalone DefaultServer on # Port 21 is the standard FTP port. Port 21 # Don't use IPv6 support by default. UseIPv6 off # Umask 022 is a good standard umask to prevent new dirs and files # from being group and world writable. Umask 022 TimeoutLogin 120 TimeoutIdle 600 TimeoutNoTransfer 900 TimeoutStalled 3600 # Where do we put the pid files? #ScoreboardPath /var/run/proftpd # To prevent DoS attacks, set the maximum number of child processes # to 30. If you need to allow more than 30 concurrent connections # at once, simply increase this value. Note that this ONLY works # in standalone mode, in inetd mode you should use an inetd server # that allows you to limit maximum number of processes per service # (such as xinetd). MaxInstances 30 MaxLoginAttempts 3 # Set the user and group under which the server will run. User apache Group users # To cause every FTP user to be "jailed" (chrooted) into their home # directory, uncomment this line. #DefaultRoot ~ # Normally, we want files to be overwriteable. AllowOverwrite on # 上传断点续传 AllowRetrieveRestart on AllowStoreRestart on # Bar use of SITE CHMOD by default <Limit SITE_CHMOD> DenyAll </Limit> # A basic anonymous configuration, no upload directories. If you do not # want anonymous users, simply delete this entire <Anonymous> section. #<Anonymous ~ftp> # User ftp # Group ftp # We want clients to be able to login with "anonymous" as well as "ftp" # UserAlias anonymous ftp # Limit the maximum number of anonymous logins # MaxClients 10 # We want 'welcome.msg' displayed at login, and '.message' displayed # in each newly chdired directory. # DisplayLogin welcome.msg # DisplayChdir .message # Limit WRITE everywhere in the anonymous chroot # <Limit WRITE> # DenyAll # </Limit> #</Anonymous> #设置MySQL认证： #数据库联接的信息，DatabaseName是数据库名， HostName是主机名， #Port是端口号，UserName是连接数据库的用户名，Password是密码。 SQLConnectInfo ftp_db@192.168.1.148 ftp_user pass #数据库认证的类型： SQLAuthTypes OpenSSL #指定用来做用户认证的表的有关信息。("FTPUSERS"和"FTPGRPS"是数据表名字，等一会而在下面建立) SQLUserInfo FTPUSERS userid passwd uid gid home shell SQLGroupInfo FTPGRPS grpname gid members #设置如果shell为空时允许用户登录： RequireValidShell off #数据库的鉴别 SQLAuthenticate users groups usersetfast groupsetfast #如果home目录不存在，则系统会为根据它的home项新建一个目录： CreateHome off #判断这个用户是否允许登录本机 #SQLUserWhereClause "accesshost like'%10.10.26.195%'" #这里的%号ProFtp不识别, 妈的!所以用下面的方法. SQLUserWhereClause "0 !=FIND_IN_SET('2.2.2.2',accesshost)" #SQL验证日志 #SQLLog SQLLogFile /usr/local/proftpd/var/sql.log #SQL验证用户的UID和GID SQLMinUserUID 500 SQLMinUserGID 100 SQLDefaultUID 500 SQLDefaultGID 100 ##### ##### MaxClients 50 UseReverseDNS off IdentLookups off #QuotaLimitTable file:/usr/local/proftpd1.3/etc/ftpquota.limittab #QuotaTallyTable file:/usr/local/proftpd1.3/etc/ftpquota.tallytab QuotaDirectoryTally on QuotaDisplayUnits Mb QuotaEngine on QuotaLog /usr/local/proftpd/var/quota.log QuotaShowQuotas on QuotaOptions ScanOnLogin DefaultRoot ~ DisplayLogin welcome.msg AllowStoreRestart on ############ Fixed Log Format ######### LogFormat awstats "%t %h %u %m %f %s %b" ExtendedLog /usr/local/proftpd/var/transfer.log read,write awstats TransferLog /usr/local/proftpd/var/transfer.log ServerLog /usr/local/proftpd/var/server.log #Single system with both ProFTPd and Clamd utilizing TCP sockets. Additionally, only files who's size is less than 250MB will be scanned. ④找到关键信息 SQLConnectInfo ftp_db@192.168.1.148 ftp_user pass 连接数据库，查看表FTPUSERS查看表，猜想这个表就是用户名密码和权限的控制表 [root@server01:/usr/local/proftpd-1.3.6rc2]# mysql -h192.168.1.148 -uftp_user -p'pass' Welcome to the MySQL monitor. Commands end with ; or \g. Your MySQL connection id is 55843792 Server version: 5.7.14-7-log Source distribution Copyright (c) 2009-2014 Percona LLC and/or its affiliates Copyright (c) 2000, 2014, Oracle and/or its affiliates. All rights reserved. Oracle is a registered trademark of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners. Type 'help;' or '\h' for help. Type '\c' to clear the current input statement. mysql> show databases; +--------------------+ | Database | +--------------------+ | information_schema | | ftp_db | +--------------------+ 2 rows in set (0.00 sec) mysql> use ftp_db; Database changed mysql> show tables; +------------------+ | Tables_in_ftp_db | +------------------+ | FTPGRPS | | FTPUSERS | | quotalimits | | quotatallies | +------------------+ 4 rows in set (0.00 sec) mysql> select * from FTPUSERS; +---------------------------------------+-------------------------------+-----+-----+-----------------------------------------------------------------------------------------------------------------------------------+---------------+--------------------------+-------------------+ | userid | passwd | uid | gid | home | shell | accesshost | coment | +---------------------------------------+-------------------------------+-----+-----+-----------------------------------------------------------------------------------------------------------------------------------+---------------+--------------------------+-------------------+ | pay_com | {md5}MCbog7BadfaroQ== | 500 | 100 | /data/www/vhosts/platform.chinasoft.com | /sbin/nologin | web3 | | 通过本地登录ftp报错： root@server01:/usr/local/proftpd-1.3.6rc2]# tail -f /usr/local/proftpd/var/server.log 2018-07-05 19:50:28,817 server01 proftpd[46981] 2.2.2.2 (3.3.3.3[3.3.3.3]): USER admin.was.chinasoft.com: no such user found from 3.3.3.3 [3.3.3.3] to 1.1.1.1:21 结合客户端报错： FTP connection has failed!Attempted to connect to 1.1.1.1 for user admin.was.chinasoft.com 数据库中有 1.1.1.1 这个授权 INSERT INTO ``(`userid`, `passwd`, `uid`, `gid`, `home`, `shell`, `accesshost`, `coment`) VALUES ('admin.was.chinasoft.com', '{md5}eddddd==', 500, 100, '/data/www/vhosts/admin.was.chinasoft.com', '/sbin/nologin', 'web3', '20150306 17:30:57'); INSERT INTO ``(`userid`, `passwd`, `uid`, `gid`, `home`, `shell`, `accesshost`, `coment`) VALUES ('admin.was.chinasoft.com', '{md5}bOBvuP1/afda==', 500, 100, '/data/www/vhosts/admin.was.chinasoft.com', '/sbin/nologin', '1.1.1.1', '20150818 23:29:30'); 报错提到了2.2.2.2刚好是这个服务器的两个IP，于是添加2.2.2.2授权 INSERT INTO ``(`userid`, `passwd`, `uid`, `gid`, `home`, `shell`, `accesshost`, `coment`) VALUES ('admin.was.chinasoft.com', '{md5}bOBvuP1/afdfdadfa==', 500, 100, '/data/www/vhosts/admin.was.chinasoft.com', '/sbin/nologin', '2.2.2.2', '20180706 10:58:00'); 重新登录发现可以正常获取ftp家目录，至此问题解决
cc-download.chinasoft.cc的处理 # 添加用户的时候报错 [root@sz_chinasoft:/usr/local/proftpd]# ./adduser.sh cc-download.chinasoft.cc /data/www/vhosts/cc-download.chinasoft.cc 1.1.1.1 ./adduser.sh: line 26: mkpasswd: command not found mysql: [Warning] Using a password on the command line interface can be insecure. UserName: cc-download.chinasoft.cc PassWord: userHome: /data/www/vhosts/cc-download.chinasoft.cc FTP IPs: 1.1.1.1 # 解决 # yum install -y expect [root@sz_chinasoft:/usr/local/proftpd]# ./adduser.sh cc-download.chinasoft.cc /data/www/vhosts/cc-download.chinasoft.cc 2.2.2.2 mysql: [Warning] Using a password on the command line interface can be insecure. UserName: cc-download.chinasoft.cc PassWord: 5sjVCiP3y userHome: /data/www/vhosts/cc-download.chinasoft.cc FTP IPs: 2.2.2.2 select * from FTPUSERS where userid like 'cc-download.chinasoft.cc' limit 10 INSERT INTO `FTPUSERS`(`userid`, `passwd`, `uid`, `gid`, `home`, `shell`, `accesshost`, `coment`) VALUES ('cc-download.chinasoft.cc', '{md5}YO/rrFcFuus/1wWWpl2DcQ==', 500, 100, '/data/www/vhosts/cc-download.chinasoft.cc', '/sbin/nologin', 'sz_chinasoft', '20190515 20:06:42'); SELECT userid, passwd, uid, gid, home, shell FROM FTPUSERS WHERE (userid='cc-download.chinasoft.cc') AND (((0 !=FIND_IN_SET('sz_chinasoft',accesshost)))) LIMIT 1 # 观察日志 [root@sz_chinasoft:/usr/local/proftpd/var]# tail -f sql.log 2019-05-15 20:21:57,777 mod_sql/4.3[30392]: >>> cmd_endpwent 2019-05-15 20:21:57,777 mod_sql/4.3[30392]: <<< cmd_endpwent 。。。 2019-05-15 20:27:09,234 mod_sql/4.3[30397]: query "SELECT userid, passwd, uid, gid, home, shell FROM FTPUSERS WHERE (userid='cc-download.chinasoft.cc') AND (((0 !=FIND_IN_SET('sz_chinasoft',accesshost)))) LIMIT 1" 。。。。 2019-05-15 20:27:09,676 mod_sql/4.3[30397]: connection 'default' count is now 2 2019-05-15 20:27:09,676 mod_sql/4.3[30397]: exiting mysql cmd_open 2019-05-15 20:27:09,676 mod_sql/4.3[30397]: query "SELECT grpname FROM FTPGRPS WHERE (gid = 100) LIMIT 1" 2019-05-15 20:27:09,896 mod_sql/4.3[30397]: entering mysql cmd_close 2019-05-15 20:27:09,896 mod_sql/4.3[30397]: connection 'default' count is now 1 2019-05-15 20:27:09,896 mod_sql/4.3[30397]: exiting mysql cmd_close 2019-05-15 20:27:09,896 mod_sql/4.3[30397]: exiting mysql cmd_select # 拿这句去数据库里面查询是查不到信息的 SELECT userid, passwd, uid, gid, home, shell FROM FTPUSERS WHERE (userid='cc-download.chinasoft.cc') AND (((0 !=FIND_IN_SET('sz_chinasoft',accesshost)))) LIMIT 1 AND (((0 !=FIND_IN_SET('sz_chinasoft',accesshost)))) LIMIT 1这句来自配置文件 [root@sz_chinasoft:/usr/local/proftpd/var]# more ../etc/proftpd.conf #判断这个用户是否允许登录本机 #SQLUserWhereClause "accesshost like'%10.10.26.195%'" #这里的%号ProFtp不识别, 所以用下面的方法. SQLUserWhereClause "0 !=FIND_IN_SET('sz_chinasoft',accesshost)" # 插入本机到数据库问题解决 INSERT INTO `FTPUSERS`(`userid`, `passwd`, `uid`, `gid`, `home`, `shell`, `accesshost`, `coment`) VALUES ('cc-download.chinasoft.cc', '{md5}YO/rrFcFuus/1wWWpl2DcQ==', 500, 100, '/data/www/vhosts/cc-download.chinasoft.cc', '/sbin/nologin', 'sz_chinasoft', '20190515 20:06:42'); SELECT userid, passwd, uid, gid, home, shell FROM FTPUSERS WHERE (userid='cc-download.chinasoft.cc') AND (((0 !=FIND_IN_SET('sz_chinasoft',accesshost)))) LIMIT 1
扫一扫
531
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
