vsftpd 安装与虚拟用户配置

vsftpd 安装与虚拟用户配置 作者：守住每一天 blog：www.opendoc.com.cn bbs：bbs.linuxtone.org 感谢：兄弟张志坚的帮助完成此文。 复制代码 测试环境： centos 5.X 64bit vsftpd 2.0 复制代码 安装：yum -y install vsftpd 需求： 虚拟三个用户，使用同一个家目录。权限如下。 ftpadmin  读写删除 ftpuser   读写 ftp       读(下载) 复制代码 目录为：/data 密码统一为：123456 一、创建虚拟用户数据库： 1、创建文件文件loginuser.txt     格式如下：   user_id   password 复制代码 /home/loginuser.txt ftpadmin 123456 ftpuser 123456 ftp 123456 复制代码 2、生成数据库文件： db_load -T -t hash -f /home/loginuser.txt /etc/vsftpd/vsftpd_login.db chmod 600 /etc/vsftpd/vsftpd_login.db 复制代码 3、配置pam文件 # vi /etc/pam.d/vsftpd.vu auth required /lib64/security/pam_userdb.so db=/etc/vsftpd/vsftpd_login account required /lib64/security/pam_userdb.so db=/etc/vsftpd/vsftpd_login 复制代码 二、为虚拟用户创建本地系统用户 useradd opendoc -d /data -s /bin/false chown opendoc.opendoc /data 复制代码 三、vsftpd.conf配置 anonymous_enable=NO local_enable=YES #write_enable=NO dirmessage_enable=YES xferlog_enable=YES xferlog_file=/var/log/vsftpd.log connect_from_port_20=YES xferlog_std_format=YES listen=YES listen_port=21 userlist_enable=YES chroot_local_user=YES tcp_wrappers=YES guest_enable=YES guest_username=opendoc pam_service_name=vsftpd.vu user_config_dir=/etc/vsftpd/vsftpd_user_conf virtual_use_local_privs=YES pasv_min_port=50000 pasv_max_port=60000 pasv_enable=yes max_clients=200 max_per_ip=4 idle_session_timeout=600 ftpd_banner=Welcome to opendoc FTP service. 复制代码 mkdir /etc/vsftpd/vsftpd_user_conf 复制代码 # vi /etc/vsftpd/vsftpd_user_conf/ftpadmin 所有权限 write_enable=YES anonymous_enable=NO anon_world_readable_only=NO anon_upload_enable=YES anon_mkdir_write_enable=YES anon_other_write_enable=YES local_umask=022 download_enable=Yes local_root=/data # vi /etc/vsftpd/vsftpd_user_conf/ftpuser 上传权限 write_enable=YES anon_world_readable_only=NO anon_upload_enable=YES anon_mkdir_write_enable=YES anon_other_write_enable=YES local_umask=022 download_enable=NO local_root=/data 复制代码 # vi /etc/vsftpd/vsftpd_user_conf/ftp 只能下载 write_enable=NO anon_world_readable_only=NO anon_upload_enable=NO anon_mkdir_write_enable=NO anon_other_write_enable=NO local_umask=022 download_enable=yes local_root=/data 复制代码 # /etc/init.d/vsftpd start Starting vsftpd for vsftpd:                                [  OK  ] 复制代码 测试： # ftp -n localhost Connected to ifidc. 530 Please login with USER and PASS. 530 Please login with USER and PASS. KERBEROS_V4 rejected as an authentication type 220 Welcome to tfhudong FTP service ftp> use ftpadmin 331 Please specify the password. Password:  230 Login successful. ftp> quit 221 Goodbye. # ftp -n localhost Connected to ifidc. 220 Welcome to tfhudong FTP service 530 Please login with USER and PASS. 530 Please login with USER and PASS. KERBEROS_V4 rejected as an authentication type ftp> use ftpuser 331 Please specify the password. Password:  230 Login successful. ftp> quit 221 Goodbye. # ftp -n localhost               Connected to ifidc. 220 Welcome to tfhudong FTP service 530 Please login with USER and PASS. 530 Please login with USER and PASS. KERBEROS_V4 rejected as an authentication type ftp> use ftp 331 Please specify the password. Password:  230 Login successful. ftp> quit 221 Goodbye. 复制代码