【linux】vstp搭建

ringoo_ming發表於2017-05-05
Linux
1.上傳VSTP檔案到/opt
2.上傳vsftpd 到/etc/pam.d

  1. #%PAM-1.0
  2. auth sufficient /lib64/security/pam_userdb.so db=/opt/vsftpd/etc/virtusers
  3. account sufficient /lib64/security/pam_userdb.so db=/opt/vsftpd/etc/virtusers
  4. session optional pam_keyinit.so force revoke
  5. auth required pam_listfile.so item=user sense=deny file=/opt/vsftpd/etc/vsftpd.user_list onerr=succeed
  6. auth required pam_shells.so
  7. auth include system-auth
  8. account include system-auth
  9. session include system-auth
  10. session required pam_loginuid.so
3.上傳vstpd到/etc/init.d
 
  1. #!/bin/bash
  2. #
  3. # vsftpd This shell script takes care of starting and stopping
  4. # standalone vsftpd.
  5. #
  6. # chkconfig: - 60 50
  7. # description: Vsftpd is a ftp daemon, which is the program \
  8. # that answers incoming ftp service requests.
  9. # processname: vsftpd
  10. # config: /etc/vsftpd/vsftpd.conf
  12. # Source function library.
  13. . /etc/rc.d/init.d/functions
  15. # Source networking configuration.
  16. . /etc/sysconfig/network
  18. RETVAL=0
  19. prog="vsftpd"
  21. start() {
  22. # Start daemons.
  24. site=`basename /opt/vsftpd/etc/vsftpd.conf`
  25. echo -n $"Starting $prog for $site: "
  26. daemon /opt/vsftpd/sbin/vsftpd /opt/vsftpd/etc/vsftpd.conf &
  27. RETVAL=$?
  28. [ $RETVAL -eq 0 ] && touch /var/lock/subsys/$prog
  29. echo
  30. return $RETVAL
  31. }
  33. stop() {
  34. # Stop daemons.
  35. echo -n $"Shutting down $prog: "
  36. killproc $prog
  37. RETVAL=$?
  38. echo
  39. [ $RETVAL -eq 0 ] && rm -f /var/lock/subsys/$prog
  40. return $RETVAL
  41. }
  43. # See how we were called.
  44. case "$1" in
  45. start)
  46. start
  47. ;;
  48. stop)
  49. stop
  50. ;;
  51. restart|reload)
  52. stop
  53. start
  54. RETVAL=$?
  55. ;;
  56. condrestart)
  57. if [ -f /var/lock/subsys/$prog ]; then
  58. stop
  59. start
  60. RETVAL=$?
  61. fi
  62. ;;
  63. status)
  64. status $prog
  65. RETVAL=$?
  66. ;;
  67. *)
  68. echo $"Usage: $0 {start|stop|restart|condrestart|status}"
  69. exit 2
  70. esac
  72. exit $RETVAL
vstpd配置檔案：/opt/vsftpd/etc/vsftpd.conf

  1. # The default compiled in settings are fairly paranoid. This sample file
  2. # loosens things up a bit, to make the ftp daemon more usable.
  3. # Please see vsftpd.conf.5 for all compiled in defaults.
  4. #
  5. # READ THIS: This example file is NOT an exhaustive list of vsftpd options.
  6. # Please read the vsftpd.conf.5 manual page to get a full idea of vsftpd's
  7. # capabilities.
  8. #
  9. # Allow anonymous FTP? (Beware - allowed by default if you comment this out).
  10. anonymous_enable=YES
  11. #
  12. # Uncomment this to allow local user to log in.
  13. local_enable=YES
  14. #
  15. # Uncomment this to enable any form of FTP write command.
  16. write_enable=YES
  17. #
  18. # Default umask for local users is 077. You may wish to change this to 022,
  19. # if your users expect that (022 is used by most other ftpd's)
  20. local_umask=022
  21. #
  22. # Uncomment this to allow the anonymous FTP user to upload files. This only
  23. # has an effect if the above global write enable is activated. Also, you will
  24. # obviously need to create a directory writable by the FTP user.
  25. #anon_upload_enable=YES
  26. #
  27. # Uncomment this if you want the anonymous FTP user to be able to create
  28. # new directories.
  29. #anon_mkdir_write_enable=YES
  30. #
  31. # Activate directory messages - messages given to remote users when they
  32. # go into a certain directory.
  33. dirmessage_enable=YES
  34. #
  35. # The target log file can be vsftpd_log_file or xferlog_file.
  36. # This depends on setting xferlog_std_format parameter
  37. xferlog_enable=YES
  38. #
  39. # Make sure PORT transfer connections originate from port 20 (ftp-data).
  40. connect_from_port_20=YES
  41. #
  42. # If you want, you can arrange for uploaded anonymous files to be owned by
  43. # a different user. Note! Using "root" for uploaded files is not
  44. # recommended!
  45. chown_uploads=NO
  46. #chown_username=whoever
  47. #
  48. # The name of log file when xferlog_enable=YES and xferlog_std_format=YES
  49. # WARNING - changing this filename affects /etc/logrotate.d/vsftpd.log
  50. xferlog_file=/opt/vsftpd/log/vsftp.log
  51. #
  52. # Switches between logging into vsftpd_log_file and xferlog_file files.
  53. # NO writes to vsftpd_log_file, YES to xferlog_file
  54. xferlog_std_format=YES
  55. #
  56. # You may change the default value for timing out an idle session.
  57. #idle_session_timeout=600
  58. #
  59. # You may change the default value for timing out a data connection.
  60. #data_connection_timeout=120
  61. #
  62. # It is recommended that you define on your system a unique user which the
  63. # ftp server can use as a totally isolated and unprivileged user.
  64. nopriv_user=nobody
  65. #
  66. # Enable this and the server will recognise asynchronous ABOR requests. Not
  67. # recommended for security (the code is non-trivial). Not enabling it,
  68. # however, may confuse older FTP clients.
  69. #async_abor_enable=YES
  70. #
  71. # By default the server will pretend to allow ASCII mode but in fact ignore
  72. # the request. Turn on the below options to have the server actually do ASCII
  73. # mangling on files when in ASCII mode.
  74. # Beware that on some FTP servers, ASCII support allows a denial of service
  75. # attack (DoS) via the command "SIZE /big/file" in ASCII mode. vsftpd
  76. # predicted this attack and has always been safe, reporting the size of the
  77. # raw file.
  78. # ASCII mangling is a horrible feature of the protocol.
  79. #ascii_upload_enable=YES
  80. #ascii_download_enable=YES
  81. #
  82. # You may fully customise the login banner string:
  83. #ftpd_banner=Welcome to blah FTP service.
  84. #
  85. # You may specify a file of disallowed anonymous e-mail addresses. Apparently
  86. # useful for combatting certain DoS attacks.
  87. #deny_email_enable=YES
  88. # (default follows)
  89. #banned_email_file=/etc/vsftpd/banned_emails
  90. #
  91. # You may specify an explicit list of local users to chroot() to their home
  92. # directory. If chroot_local_user is YES, then this list becomes a list of
  93. # users to NOT chroot().
  94. chroot_list_enable=YES
  95. # (default follows)
  96. chroot_list_file=/opt/vsftpd/etc/chroot_list
  97. #
  98. # You may activate the "-R" option to the builtin ls. This is disabled by
  99. # default to avoid remote users being able to cause excessive I/O on large
  100. # sites. However, some broken FTP clients such as "ncftp" and "mirror" assume
  101. # the presence of the "-R" option, so there is a strong case for enabling it.
  102. #ls_recurse_enable=YES
  103. #
  104. # When "listen" directive is enabled, vsftpd runs in standalone mode and
  105. # listens on IPv4 sockets. This directive cannot be used in conjunction
  106. # with the listen_ipv6 directive.
  107. listen=YES
  108. #
  109. # This directive enables listening on IPv6 sockets. To listen on IPv4 and IPv6
  110. # sockets, you must run two copies of vsftpd whith two configuration files.
  111. # Make sure, that one of the listen options is commented !!
  112. #listen_ipv6=YES
  113. #local_root=/ynd20_ftp
  114. pam_service_name=vsftpd
  115. userlist_enable=YES
  116. userlist_file=/opt/vsftpd/etc/vsftpd.user_list
  117. tcp_wrappers=YES
  118. chroot_local_user=YES
  119. user_config_dir=/opt/vsftpd/user_conf
  120. guest_enable=YES
  121. guest_username=pso（使用者）
  122. virtual_use_local_privs=YES
  123. anon_other_write_enable=NO
  124. cmds_allowed=ABOR,CWD,LIST,MDTM,MKD,NLST,PASS,PASV,PORT,PWD,QUIT,RETR,RMD,RNFR,RNTO,SITE,SIZE,STOR,TYPE,USER,ACCT,APPE,CDUP
  125. ,HELP,MODE,NOOP,REIN,STAT,STOU,STRU,SYST
使用者新增：/opt/vsftpd/user_conf
新建一個使用者名稱為檔名的檔案，比如dsp

  1. local_root=/eInvoice #共享目錄
  2. anonymous_enable=NO
  3. write_enable=YES
  4. local_umask=022
  5. anon_upload_enable=NO
  6. anon_mkdir_write_enable=NO
  7. idle_session_timeout=600
  8. data_connection_timeout=120
  9. max_clients=10
  10. max_per_ip=5
  11. local_max_rate=50000 #上傳速度 50000=50KB/s
  12. cmds_allowed=ABOR,CWD,LIST,MDTM,MKD,NLST,PASS,PASV,PORT,PWD,QUIT,RETR,RMD,RNFR,RNTO,SITE,SIZE,STOR,TYPE,USER,ACCT,APPE,CDUP
  13. ,HELP,MODE,NOOP,REIN,STAT,STOU,STRU,SYST,DELE
使用者名稱，密碼檔案：
/opt/vsftpd/etc/virtusers
單行賬號，雙行密碼
  1. dsp
  2. dsp@123
檢視密碼檔案命令：strings virtusers.db 
生成密碼檔案資料庫： db_load -T -t hash -f virtusers virtusers.db
vstp重啟：service vsftpd restart

來自 “ ITPUB部落格 ” ，連結：http://blog.itpub.net/31442725/viewspace-2138525/，如需轉載，請註明出處，否則將追究法律責任。

相關文章