1.ftp服務搭建
yum install vsftpd
getenforce
cp /etc/vsftpd/vsftpd.conf /etc/vsftpd/vsftpd.conf.bak
ll /etc/vsftpd/vsftpd.conf.bak
id www
cat /etc/passwd|grep www
egrep -v "^#|^$" /etc/vsftpd/vsftpd.conf
> /etc/vsftpd/vsftpd.conf
2.主配置檔案:
[root@reserve data]# cat /etc/vsftpd/vsftpd.conf
anonymous_enable=NO
local_enable=YES
write_enable=YES
local_umask=022
dirmessage_enable=YES
xferlog_enable=YES
connect_from_port_20=YES
xferlog_std_format=YES
listen=YES
pam_service_name=vsftpd
userlist_enable=YES
tcp_wrappers=YES
chroot_local_user=YES
guest_enable=YES
guest_username=www
virtual_use_local_privs=YES
user_config_dir=/etc/vsftpd/extra
3.使用者個人子配置檔案:
[root@reserve data]# cat /etc/vsftpd/extra/kafa
local_root=/data/www/mm/
anon_upload_enable=NO
anon_mkdir_write_enable=NO
idle_session_timeout=600
data_connection_timeout=120
max_clients=10
max_per_ip=5
local_max_rate=5000
4.密碼檔案:
[root@reserve data]# cat /etc/vsftpd/vsftpd_login
zka@kafa
testjZK5#an
5.加密生成密碼檔案:
db_load -T -t hash -f /etc/vsftpd/vsftpd_login /etc/vsftpd/vsftpd_login.db
6.将密碼檔案寫入pam.d認證檔案下:
[root@reserve data]# cat /etc/pam.d/vsftpd
#%PAM-1.0
#session optional pam_keyinit.so force revoke
#auth required pam_listfile.so item=user sense=deny file=/etc/vsftpd/ftpusers onerr=succeed
#auth required pam_shells.so
#auth include password-auth
#account include password-auth
#session required pam_loginuid.so
#session include password-auth
auth required /lib64/security/pam_userdb.so db=/etc/vsftpd/vsftpd_login
account required /lib64/security/pam_userdb.so db=/etc/vsftpd/vsftpd_login
7.給站點目錄授權:
[root@reserve data]# cat /etc/passwd|grep /data/www
www:x:503:503::/data/www:/sbin/nologin
/data/www為站點目錄
chown -R www.www /data/www
/etc/init.d/vsftpd restart
8.遇到530連結不上ftp解決辦法:
防火牆影響:解決:modprobe ip_conntrack_ftp
參考文檔:http://www.myexception.cn/vsts/480445.html
ftp參數意義參考文檔:
http://moerjinrong.blog.51cto.com/11124564/1881357
本文轉自 wjw555 51CTO部落格,原文連結:http://blog.51cto.com/wujianwei/1961459