Linux FTP Server user login authentication restrictions

By default, the VSFTPD service uses two methods to restrict user login. By default, the PAM module and the userlist of the built-in configuration file ftpuser reject user logon. The default userlist rejects user logon. Ftpuser --- allows you to log on to vimetcpam. dvsftpdsenseallow. If you want a user to log on, his name must appear in this file, userlist also

The VSFTPD service uses two methods by default to restrict user login. The PAM module and the userlist of the built-in configuration file

 

DefaultFtpUser rejects user Logon

Userlist rejects user logon by default

 

1. Ftpuser --- allows you to log on to vim/etc/pam. d/vsftpd sense = allow. If you want a user to log on, his name must appear in this file & userlist or refuse to log on.

Tom does not appear in userlist & tom appears in ftpuser ============ allow tom to log on

Tom does not appear in userlist & tom does not appear in ftpuser ========== deny tom Login

Tom appears in userlist & tom does not appear in ftpuser ========== deny tom Login

Tom appears in userlist & tom appears in ftpuser ================== deny tom Login

2. Ftpuser --- allows you to log on to vim/etc/pam. d/vsftpd sense = allow. If you want a user to log on, his name must appear in this file. & userlist also allows users to log on.

Tom does not appear in userlist & tom appears in ftpuser ========== deny tom Login

Tom appears in userlist & tom does not appear in ftpuser ============== refuse tom Login

Tom appears in userlist & tom appears in ftpuser ================ allow tom to log on

Tom does not appear in userlist & tom does not appear in ftpuser ============== deny tom Login

3. Ftpuser rejects user logon, while userlist rejects User Logon

If tom appears in any file, he or she is denied access to ftp.

Tom does not appear in any file and is allowed to log on

4. Ftpuser rejects User Logon & userlist allows user logon

Tom no longer appears in userlist & tom appears in ftpuser ========== deny tom Login

Tom appears in userlist & tom appears in ftpuser ================ deny tom Login

Tom does not appear in userlist & tom does not appear in ftpuser ========== deny tom Login

Tom appears in userlist & tom does not appear in ftpuser =============== allow tom to log on

 

Userlist takes precedence over ftpuser. If userlist rejects a user's logon, a message of Logon rejection is provided. If ftpuser rejects a user's logon, a password is prompted first, however, logon is not allowed in any way. (a logon failure is prompted after a password is entered)

 

Chroot_list _Enable= YES

Chroot_list _File=/Etc/vsftpd/chroot_list

When chroot_local_user = YES, only users in chroot_list can switch directories on the ftp server.

When chroot_local_user = NO, users in chroot_list cannot switch directories on the ftp server.