[Switch] vsftp installation, configuration, and uninstallation in CentOS, centosvsftp
1. install VSFTP1 yum-y install vsftpdView Code
2. Configure the vsftpd. conf file
1 # Example config file/etc/vsftpd. conf 2 #3 # The default compiled in settings are fairly paranoid. this sample file 4 # loosens things up a bit, to make the ftp daemon more usable. 5 # Please see vsftpd. conf.5 for all compiled in defaults. 6 #7 # read this: This example file is NOT an exhaustive list of vsftpd options. 8 # Please read the vsftpd. conf.5 manual page to get a full idea Vsftpd's 9 # capabilities. 10 #11 # Allow anonymous FTP? (Beware-allowed by default if you comment this out ). 12 # anonymous_enable = YES 13 #14 # Uncomment this to allow local users to log in. 15 local_enable = YES 16 #17 # Uncomment this to enable any form of FTP write command. 18 write_enable = YES 19 #20 # Default umask for local users is 077. you may wish to change this to 022, 21 # if your users perform CT that (022 is used by most other ftpd's) 22 loca L_umask = 022 23 #24 # Uncomment this to allow the anonymous FTP user to upload files. this only 25 # has an effect if the above global write enable is activated. also, you will 26 # obviusly need to create a directory writable by the FTP user. 27 # anon_upload_enable = YES 28 #29 # Uncomment this if you want the anonymous FTP user to be able to create 30 # new directories. 31 # anon_mkdir_write_enab Le = YES 32 #33 # Activate directory messages-messages given to remote users when they 34 # go into a certain directory. 35 dirmessage_enable = YES 36 #37 # The target log file can be vsftpd_log_file or xferlog_file. 38 # This depends on setting xferlog_std_format parameter 39 xferlog_enable = YES 40 #41 # Make sure PORT transfer connections originate from port 20 (ftp-data ). 42 connect_from_port_2 0 = YES 43 #44 # If you want, you can arrange for uploaded anonymous files to be owned by 45 # a different user. Note! Using "root" for uploaded files is not 46 # recommended! 47 # chown_uploads = YES 48 49 # chown_username = whoever 50 #51 # The name of log file when xferlog_enable = YES and xferlog_std_format = YES 52 # WARNING-changing this filename affects/etc/. d/vsftpd. log 53 # xferlog_file =/var/log/xferlog 54 #55 # Switches between logging into vsftpd_log_file and xferlog_file files. 56 # NO writes to vsftpd_log_file, YES to xferlog_file 57 xferlog_std_format = Y ES 58 #59 # You may change the default value for timing out an idle session. 60 idle_session_timeout = 600 61 #62 # You may change the default value for timing out a data connection. 63 data_connection_timeout = 120 64 #65 # It is recommended that you define on your system a unique user which the 66 # ftp server can use as a totally isolated and unprivileged user. 67 # nopriv_user = ft1_cure 68 #69 # Enable this and the server will recognize asynchronous ABOR requests. not 70 # recommended for security (the code is non-trivial ). not enabling it, 71 # however, may confuse older FTP clients. 72 # async_abor_enable = YES 73 #74 # By default the server will pretend to allow ASCII mode but in fact ignore 75 # the request. turn on the below options to have the server actually do ASCII 76 # mangling On files when in ASCII mode. 77 # Beware that on some FTP servers, ASCII support allows a denial of service 78 # attack (DoS) via the command "SIZE/big/file" in ASCII mode. vsftpd 79 # predicted this attack and has always been safe, reporting the size of the 80 # raw file. 81 # ASCII mangling is a horrible feature of the protocol. 82 ascii_upload_enable = YES 83 ascii_download_enable = YES 84 85 #86 # You may fully customise the login banner string: 87 ftpd_banner = Welcome to lightnear FTP service. 88 #89 # You may specify a file of disallowed anonymous e-mail addresses. apparently 90 # useful for combatting certain DoS attacks. 91 # deny_email_enable = YES 92 # (default follows) 93 # banned_email_file =/etc/vsftpd/banned_emails 94 #95 # You may specify an explicit list of local users to chroot () To their home 96 # directory. if chroot_local_user is YES, then this list becomes a list of 97 # users to NOT chroot (). 98 chroot_local_user = YES 99 # chroot_list_enable = YES 100 # (default follows) 101 # chroot_list_file =/etc/vsftpd/chroot_list 102 #103 # You may activate the "-R" option to the builtin ls. this is disabled by 104 # default to avoid remote users being able to cause excessive I/O on Large 105 # sites. however, some broken FTP clients such as "ncftp" and "mirror" assume 106 # the presence of the "-R" option, so there is a strong case for enabling it. 107 ls_recurse_enable = YES108 #109 # When "listen" directive is enabled, vsftpd runs in standalone mode and 110 # listens on IPv4 sockets. this directive cannot be used in conjunction 111 # with the listen_ipv6 direve ve. 112 lis Ten = YES 113 #114 # This directive enables listening on IPv6 sockets. to listen on IPv4 and ipv6-115 # sockets, you must run two copies of vsftpd with two configuration files. 116 # Make sure, that one of the listen options is commented !! 117 # listen_ipv6 = YES118 119 pam_service_name = vsftpd 120 userlist_enable = YES 121 userlist_deny = NO 122 local_root =/var/public_root 123 tcp_wrappers = YES124 use_localtime = YESView Code
3. Add an FTP account
The account name is "objectyan" and the password is "objectyan"
1 [root @ localhost ~] # Useradd objectyan-s/sbin/nologin2 [root @ localhost ~] # Passwd objectyanView Code
4. Edit the user_list file and allow the objectyan user to access FTP 1 [root @ localhost ~] # Vi/etc/vsftpd/user_list 2 3 # vsftpd userlist 4 # If userlist_deny = NO, only allow users in this file 5 # If userlist_deny = YES (default ), never allow users in this file, and 6 # do not even prompt for a password. 7 # Note that the default vsftpd pam config also checks/etc/vsftpd/ftpusers 8 # for users that are denied. 9 root10 bin11 daemon12 adm13 lp14 sync15 shutdown16 halt17 mail18 news19 uucp20 operator21 games22 nobody23 objectyanView Code 5. Create our root directory and set access permissions 1 [root @ localhost ~] # Mkdir/var/public_root2 [root @ localhost ~] # Chown-R objectyan/var/public_root3 [root @ localhost ~] # Chmod-R 755/var/public_rootView Code6. enable vsftpd service 1 [root @ localhost ~] # Service vsftpd startView Code7. vsftp service is enabled by default.
1 [root @ localhost var] # chkconfig vsftpd onView Code
How to uninstall vsftpd from centos
If vsftpd is installed on the server, You Need To uninstall vsftpd if a configuration error occurs.
1 [root @ localhost ~] # Rpm-aq vsftpdView Code
Vsftpd-2.0.5-16.el5_5.1 # here is the result of finding vsftpd
1 [root @ localhost ~] # Rpm e vsftpd-2.0.5-16.el5_5.1View Code
# Delete the rpm-e search result.
Warning:/etc/vsftpd/user_list saved as/etc/vsftpd/user_list.rpmsave
Warning:/etc/vsftpd/ftpusers saved as/etc/vsftpd/ftpusers. rpmsave # The vsftp user list file will be backed up when you delete the file.