CentOS 7安裝配置FTP伺服器

標籤：

CentOS7下FTP伺服器的安裝配置。

假設我們有以下要求

路徑	許可權	備忘
/ftp/open	公司所有人員包括來賓均可以訪問	唯讀
/ftp/private	僅允許 Alice 、 Jack 、 Tom 三個人訪問	Alice 、 Jack 只允許下載， Tom 可以上傳  均使用虛擬賬戶

安裝FTP

//使用yum安裝

# yum -yinstall ftp vsftpd

//或者使用rpm安裝以下兩個包

ftp-0.17-66.el7.x86_64

vsftpd-3.0.2-9.el7.x86_64

//另外需要安裝db包，用來加密虛擬使用者的賬戶資訊

//這個包在centos7中預設已經安裝了

# rpm -qf/usr/bin/db_load

libdb-utils-5.3.21-17.el7_0.1.x86_64

配置

# mkdir/ftp/open

做幾個測試檔案

# echo opentest > /ftp/open/open.txt

# echo filetest > /tmp/filetest1.txt

 

# touch /ftp/open/anontest.txt

//查看設定檔所在路徑

# rpm -qc vsftpd

/etc/logrotate.d/vsftpd

/etc/pam.d/vsftpd

/etc/vsftpd/ftpusers

/etc/vsftpd/user_list

/etc/vsftpd/vsftpd.conf

 

# cd /etc/vsftpd/

//備份原有設定檔

# cp vsftpd.conf vsftpd.conf.origin

 

//建立密碼明文檔案

# vi/etc/vsftpd/vftpuser.txt

alice

[email protected]

jack

[email protected]

tom

[email protected]

 

//根據明文建立密碼DB檔案

# db_load -T -t hash -f /etc/vsftpd/vftpuser.txt \

/etc/vsftpd/vftpuser.db

 

//查看密碼資料檔案

# file/etc/vsftpd/vftpuser.db

/etc/vsftpd/vftpuser.db: Berkeley DB (Hash, version9, native byte-order)

 

//建立vftpd的guest賬戶

# useradd -d/ftp/private -s /sbin/nologin vftpuser

 

# vi/etc/pam.d/vsftpd

將auth及account的所有配置行行均注釋掉，添加如下內容：

auth required pam_userdb.so db=/etc/vsftpd/vftpuser

account required pam_userdb.sodb=/etc/vsftpd/vftpuser

//開啟設定檔

# vi/etc/vsftpd/vsftpd.conf

//在最後添加

anon_root=/ftp/open

virtual_use_local_privs=YES

guest_enable=YES

guest_username=vftpuser

chroot_local_user=YES

allow_writeable_chroot=YES

//設定自動啟動

# systemctl enable vsftpd

ln -s‘/usr/lib/systemd/system/vsftpd.service‘‘/etc/systemd/system/multi-user.target.wants/vsftpd.service‘

 

# systemctlstart vsftpd

 

//查看目前的狀態

# systemctlstatus vsftpd

vsftpd.service - Vsftpd ftp daemon

Loaded:loaded (/usr/lib/systemd/system/vsftpd.service; enabled)

Active:active (running) since Mon 2014-08-11 19:57:12 CST; 22h ago

Main PID:12733 (vsftpd)

CGroup:/system.slice/vsftpd.service

a””a”12733 /usr/sbin/vsftpd /etc/vsftpd/vsftpd.conf

 

systemd[1]: Starting Vsftpd ftp daemon...

systemd[1]: Started Vsftpd ftp daemon.

vsftpd[12738]: pam_userdb(vsftpd:auth): user‘alice‘ granted access

vsftpd[12753]: pam_userdb(vsftpd:auth): user ‘jack‘granted access

systemd[1]: Started Vsftpd ftp daemon.

測試

//測試匿名賬戶

# ftplocalhost

Trying ::1...

Connected to localhost (::1).

220 (vsFTPd 3.0.2)

Name(localhost:root): anonymous

331 Please specify the password.

Password:

230 Login successful.

Remote system type is UNIX.

Using binary mode to transfer files.

ftp> ls

229 Entering Extended Passive Mode (|||61057|).

150 Here comes the directory listing.

-rw-r--r--  1 0        0              9 Aug 11 11:45 open.txt

226 Directory send OK.

ftp> lcd/tmp

Local directory now /tmp

ftp> getopen.txt

local: open.txt remote: open.txt

229 Entering Extended Passive Mode (|||64276|).

150 Opening BINARY mode data connection foropen.txt (9 bytes).

226 Transfer complete.

9 bytes received in 0.000895 secs(10.06 Kbytes/sec)

ftp> bye

221 Goodbye.

 

//測試本地賬戶

# ftplocalhost

Trying ::1...

Connected to localhost (::1).

220 (vsFTPd 3.0.2)

Name(localhost:root): alice

331 Please specify the password.

Password:

230 Login successful.

Remote system type is UNIX.

Using binary mode to transfer files.

ftp> ls

229 Entering Extended Passive Mode (|||21750|).

150 Here comes the directory listing.

226 Directory send OK.

ftp> !ls/tmp

filetest1.txt    open.txt    systemd-private-9xPN7y  vmware-fonts0      vmware-installer1  vmware-root            vmware-tools-distrib

ks-script-_Yi85R SAMBA.docx  vmware-config0          vmware-installer0  vmware-installer2  vmware-root-2117481760  yum.log

ftp> lcd/tmp

Local directory now /tmp

ftp> putfiletest1.txt

local: filetest1.txt remote: filetest1.txt

229 Entering Extended Passive Mode (|||65399|).

150 Ok to send data.

226 Transfer complete.

9 bytes sent in 5.9e-05 secs (152.54 Kbytes/sec)

ftp> bye

221 Goodbye.

CentOS 7安裝配置FTP伺服器