First, ready to install
Environment: CentOS 6.3
Installation: minimal (min)
Note: Modify time zones and times
Required Software: vsftp http Pam db4-devel FTP (client installation package)
Second, installation:
1. Installation of VSFTPD service-related components:
[Root@server ~]# Rpm-qa |grep vsftp
[Root@server ~]# yum install vsftpd*-y
2. Confirm the installation of Pam service-related components:
[Root@server ~]# Rpm-qa |grep Pam
[Root@server ~]# Yum Install pam*
Development package, in fact, does not pretend to have no relationship, the main purpose is to confirm Pam.
3. Install the DB4 part package:
In particular, a DB4 package is installed to support the file database.
[Root@server ~]# Rpm-qa |grep DB4
[Root@server ~]# Yum Install db4*
Ensure DB4 Kit Installation: db4-utils-4.7.25-17.el6.i686
4. Install HTTP Package:
[Root@server ~]# Yum Install httpd*
Third, System account
1. Establish the SYSTEM account:
[Root@server ~]# Useradd FTP01
[Root@server ~]# passwd FTP01
Change the user ftp01 password.
New Password:
Invalid password: It does not contain enough different characters
Invalid password: It's a palindrome.
Re-enter the new password:
PASSWD: All authentication tokens have been successfully updated.
2. Establish the host user of the VSFTPD service:
[Root@server ~] #useradd vsftpd-s/sbin/nologin
The default VSFTPD service host user is root, but this does not meet the need for security. This creates a user named Vsftpd, who is used as a service hosting user to support VSFTPD. Since the user is only used to support the VSFTPD service, there is no need to allow him to log on to the system and set him up as a user who cannot log on to the system.
3. Establish VSFTPD Virtual Host User:
[Root@server ~] #useradd virtusers-s/sbin/nologin
This article mainly introduces VSFTP virtual users, virtual users are not system users, that is, these FTP users in the system does not exist. Their overall permissions are actually focused on a user in the system, the so-called VSFTPD virtual host user, is such a support for all virtual users of the host user. Because he supports all the virtual users of FTP, then his own permissions will affect these virtual users, therefore, in security considerations, but also pay attention to the control of the user's rights, the user has absolutely no access to the system is necessary, here also set him for the user can not login system.