mysql pam认证_vsftpd实现mysql-pam认证登录

更多技术文章欢迎访问个人主页http://www.linuxsun.com

一、安装相关软件包mysql-5.0.41pam_mysql-0.7RC1vsftpd-2.0.5openssl-0.98e

1.安装mysql-5.0.41

#groupadd mysql

#useradd -g mysql -s /sbin/nologin -M mysql

#tar zxvf mysql-5.0.41.tar.gz

#cd mysql-5.0.41

#./configure –prefix=/usr/local/mysql –sysconfdir=/etc –enable-thread-safe-client –

enable-local-infile –with-charset=gbk –with-extra-charset=all –with-low-memory

#make

#make install

#cp support-files/my-medium.cnf /etc/my.cnf

#cd /usr/local/mysql

#chgrp -R mysql .

#bin/mysql_install_db –user=mysql

#chown -R root .

#chown -R mysql var

#bin/mysqld_safe –user=mysql &

#cd /usr/local/src/mysql-5.0.41

#cp support/mysql.server /etc/rc.d/init.d/mysqld

#chmod 700 /etc/rc.d/init.d/mysqld

#chkconfig –add mysqld

#chkconfig –level 345 mysqld on

测试

#/usr/local/mysql/bin/mysqladmin ping

#/usr/local/mysql/bin/mysqladmin version

#/usr/local/mysql/bin/mysql

添加root密码

#/usr/local/mysql/bin/mysqladmin -uroot -p 旧密码 password ‘新密码’

修改库文件的搜索路径

#vim /etc/ld.so.conf      添加如下条目：/usr/local/mysql/lib/mysql

增加库文件及头文件的链接

ln -s /usr/local/mysql/lib/mysql /usr/lib/mysqlln -s /usr/local/mysql/include/mysql /usr/include/mysql

2.安装openssl-0.9.8e

#tar zxvf openssl-0.9.8e.tar.gz

#cd openssl-0.9.8e

#./config shared zlib

#make

#make test

#make installmv /usr/bin/openssl /usr/bin/openssl.OFFmv /usr/include/openssl /usr/include/openssl.OFFln -s /usr/local/ssl/bin/openssl /usr/bin/opensslln -s /usr/local/ssl/include/openssl /usr/include/openssl

配置库文件搜索路径

#echo “/usr/local/ssl/lib” >> /etc/ld.so.conf

#ldconfig -v

3.安装pam_mysql-0.7RC1

#tar zxvf  pam_mysql-0.7RC1.tar.gz

#cd  pam_mysql-0.7RC1

#./configure –with-mysql=/usr/local/mysql –with-openssl=/usr/local/ssl

#make

#make install

#cp /usr/lib/security/pam_mysql.so /lib/security/

4.安装vsftpd-2.0.5

#mkdir -pv /usr/share/empty   /var/ftp

#useradd -s /bin/false -d /var/ftp ftp

#tar xzvf vsftpd-2.0.5.tar.gz

#cd vsftpd-2.0.5

#make

#make install

安装配置文件

#cp vsftpd.conf /etc

编辑配置文件/etc/vsftpd.conf添加：listen=YES

启动服务器

#/usr/local/sbin/vsftpd &

#chmod og-w /var/ftp

二、配置

1.准备数据库及相关表

在此，我们建立名为vsftp的数据库来存放相关虚拟用户的帐号

mysql> create database vsftp;

mysql> grant select on vsftp.* to vsftpd@localhost identified by ’123456′;mysql> grant select on vsftp.* to vsftpd@127.0.0.1 identified by ’123456′;

mysql> use vsftp;mysql> create table users (    -> id int AUTO_INCREMENT NOT NULL,    -> name char(20) binary NOT NULL,    -> passwd char(48) binary NOT NULL,    -> primary key(id)    -> );

添加测试的虚拟用户,其密码采取加密存放的方式

mysql> insert into users(name,passwd) values(‘benet’,password(’123456′));mysql> insert into users(name,passwd) values(‘aptech’,password(’123456′));

查看结果

mysql> select * from users;+—-+———–+————————————————————————-

—+| id | name    | passwd

|+—-+———–+————————————————————————-

—+|  1 | benet    | *6BB4837EB74329105EE4568DDA7DC67ED2CA2AD9 | |  2 | aptech  | *6BB4837EB74329105EE4568DDA7DC67ED2CA2AD9 | +—-+———–+————————————————————————-

—+3 rows in set (0.00 sec)

2.建立pam认证所需文件

#vim /etc/pam.d/vsftp.mysql

添加如下两行

auth required /lib/security/pam_mysql.so user=vsftpd passwd=123456 host=localhost db=vsftp

table=users

usercolumn=name passwdcolumn=passwd crypt=2account required /lib/security/pam_mysql.so user=vsftpd passwd=123456 host=localhost

db=vsftp table=users

usercolumn=name passwdcolumn=passwd crypt=2

3.修改vsftpd的配置文件，使其适应mysql认证

建立虚拟用户映射的系统用户及对应的目录

#useradd -s /sbin/nologin -d /var/ftp2 vsftp

#chmod go+rx /var/ftp2

请确保/etc/vsftpd.conf中已经启用了以下选项

anonymous_enable=YES

local_enable=YES

write_enable=YES

anon_upload_enable=NO

anon_mkdir_write_enable=NO

chroot_local_user=YES

添加以下选项guest_enable=YES

guest_username=vsftp

listen=YES

pam_service_name=vsftpd.mysql

三、启动vsftpd服务

#/usr/local/sbin/vsftpd &

查看端口开启情况

# netstat -tnlp |grep :21tcp        0      0 0.0.0.0:21              0.0.0.0:*               LISTEN      23286/vsftpd

使用虚拟用户登录,验正配置结果，以下为本机的命令方式测试，你也可以在其它Win Box上用IE或者FTP

客户端工具登录验正

# ftp localhostConnected to localhost (127.0.0.1).220 (vsFTPd 2.0.5)Name (localhost:root): benet331 Please specify the password.Password:230 Login successful.Remote system type is UNIX.Using binary mode to transfer files.ftp> ls227 Entering Passive Mode (127,0,0,1,235,31)150 Here comes the directory listing.-rw-r–r–    1 0        0          155985 Jun 06 07:16 vsftpd-2.0.5.tar.gz226 Directory send OK.