{"id":362,"date":"2017-08-23T09:42:03","date_gmt":"2017-08-23T01:42:03","guid":{"rendered":"https:\/\/blog.jsjs.org\/?p=362"},"modified":"2017-08-23T09:42:03","modified_gmt":"2017-08-23T01:42:03","slug":"centos7%e4%b8%ad%e6%90%ad%e5%bb%baftp%e6%9c%8d%e5%8a%a1%e5%99%a8","status":"publish","type":"post","link":"https:\/\/blog.jsjs.org\/?p=362","title":{"rendered":"CentOS7\u4e2d\u642d\u5efaFTP\u670d\u52a1\u5668"},"content":{"rendered":"

\u5982\u679c\u662f\u5728\u865a\u62df\u673a\u4e2d\u8bd5\u9a8c\u7684\uff0c\u6700\u597d\u5148\u62cd\u6444\u5feb\u7167\u4ee5\u514d\u51fa\u73b0\u9519\u8bef\u65f6\u6062\u590d<\/p>\n

 <\/p>\n

1\uff0e\u5b89\u88c5vsftpd<\/strong><\/p>\n

#\u9996\u5148\u8981\u67e5\u770b\u4f60\u662f\u5426\u5b89\u88c5vsftp<\/p>\n

\u00a0[root@localhost \/]# rpm -q vsftpd<\/p>\n

vsftpd-3.0.2-10.el7.x86_64 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\uff08\u663e\u793a\u4e5f\u5c31\u5b89\u88c5\u6210\u529f\u4e86\uff01\uff09<\/p>\n

#\u5982\u679c\u6ca1\u6709\u5219\u5b89\u88c5vsftpd<\/p>\n

[root@localhost\/]# yum\u00a0 install -y\u00a0 vsftpd<\/p>\n

#\u5b8c\u6210\u540e\u518d\u68c0\u67e5\u4e00\u904d<\/p>\n

\u00a0[root@localhost \/]# whereis\u00a0 vsftpd<\/p>\n

vsftpd:\/usr\/sbin\/vsftpd \/etc\/vsftpd\/usr\/share\/man\/man8\/vsftpd<\/p>\n

\n

#\u67e5\u770bvsftpd\u670d\u52a1\u7684\u72b6\u6001<\/p>\n

\u00a0[root@localhost \/]# systemctl statusvsftpd.service<\/p>\n

(\u5982\u679c\u662f\u6fc0\u6d3b\u72b6\u6001\u7684\u8bdd\u4f1a\u6709active\u7eff\u8272\u7684\u6807\u8bb0)<\/p>\n

#\u6fc0\u6d3bvsftpd\u670d\u52a1<\/p>\n

\u00a0[root@localhost \/]# systemctl startvsftpd.service<\/p>\n

#\u8bbe\u7f6evsftpd\u670d\u52a1\u5f00\u673a\u81ea\u542f<\/p>\n

\u00a0[root@localhost \/]#systemctl enablevsftpd.service<\/p>\n

\n

 <\/p>\n

2.\u00a0\u914d\u7f6evsftpd.conf<\/strong><\/p>\n

#\u9996\u5148\u5907\u4efd\u914d\u7f6e\u6587\u4ef6\uff08\u5fc5\u987b\u8981\u5907\u4efd\uff0c\u4ee5\u514d\u51fa\u73b0\u610f\u5916\u65f6\u6062\u590d\u3002\uff09<\/p>\n

cp\u00a0\/etc\/vsftpd\/vsftpd.conf\/etc\/vsftpd\/vsftpd.conf.bak<\/p>\n

\n

#\u6267\u884c\u4ee5\u4e0b\u547d\u4ee4\uff08sed\u00a0 -i \u547d\u4ee4\u76f8\u5f53\u4e8e\u76f4\u63a5\u4fee\u6539\u539f\u6587\u4ef6\uff09<\/p>\n

sed\u00a0-i”s\/anonymous_enable=YES\/anonymous_enable=NO\/g”\u00a0‘\/etc\/vsftpd\/vsftpd.conf’<\/p>\n

\n

sed\u00a0-i”s\/#anon_upload_enable=YES\/anon_upload_enable=NO\/g”‘\/etc\/vsftpd\/vsftpd.conf’<\/p>\n

\n

sed\u00a0-i”s\/#anon_mkdir_write_enable=YES\/anon_mkdir_write_enable=YES\/g”‘\/etc\/vsftpd\/vsftpd.conf’<\/p>\n

\n

sed\u00a0-i”s\/#chown_uploads=YES\/chown_uploads=NO\/g”\u00a0‘\/etc\/vsftpd\/vsftpd.conf’<\/p>\n

\n

sed\u00a0-i”s\/#async_abor_enable=YES\/async_abor_enable=YES\/g”‘\/etc\/vsftpd\/vsftpd.conf’<\/p>\n

\n

sed\u00a0-i”s\/#ascii_upload_enable=YES\/ascii_upload_enable=YES\/g”‘\/etc\/vsftpd\/vsftpd.conf’<\/p>\n

\n

sed\u00a0-i”s\/#ascii_download_enable=YES\/ascii_download_enable=YES\/g”‘\/etc\/vsftpd\/vsftpd.conf’<\/p>\n

\n

sed\u00a0-i”s\/#ftpd_banner=Welcome to blah FTP service.\/ftpd_banner=Welcome toFTP service.\/g”‘\/etc\/vsftpd\/vsftpd.conf’<\/p>\n

(\u5176\u5b9e\u4f60\u4e5f\u53ef\u4ee5\u76f4\u63a5\u4f7f\u7528<\/p>\n

\u00a0 vim\u00a0\/etc\/vsftpd\/vsftpd.conf \u8fdb\u5165\u914d\u7f6e\u6587\u4ef6\u4fee\u6539\u5982\u4e0b<\/p>\n

\u00a0 \u00a0\u00a0anonymous_enable=NO\u00a0 # \u7981\u7528\u533f\u540d\u767b\u5f55<\/p>\n

\u00a0 \u00a0 ascii_upload_enable=YES<\/p>\n

\u00a0 \u00a0ascii_download_enable=YES<\/p>\n

\u00a0 \u00a0chroot_local_user=YES\u00a0 # \u542f\u7528\u9650\u5b9a\u7528\u6237\u5728\u5176\u4e3b\u76ee\u5f55\u4e0b<\/p>\n

)<\/p>\n

#\u4e4b\u540e\u6dfb\u52a0\u4e0b\u5217\u5185\u5bb9\u5230vsftpd.conf\u672b\u5c3e<\/p>\n

use_localtime=YES<\/p>\n

listen_port=21<\/p>\n

chroot_local_user=YES<\/p>\n

idle_session_timeout=300<\/p>\n

guest_enable=YES<\/p>\n

guest_username=vsftpd<\/p>\n

user_config_dir=\/etc\/vsftpd\/vconf<\/p>\n

data_connection_timeout=1<\/p>\n

virtual_use_local_privs=YES<\/p>\n

pasv_min_port=10060<\/p>\n

pasv_max_port=10090<\/p>\n

accept_timeout=5<\/p>\n

connect_timeout=1<\/p>\n

 <\/p>\n

3.\u00a0\u5efa\u7acb\u7528\u6237\u6587\u4ef6<\/strong><\/p>\n

#\u7b2c\u4e00\u884c\u7528\u6237\u540d\uff0c\u7b2c\u4e8c\u884c\u5bc6\u7801\uff0c\u4e0d\u80fd\u4f7f\u7528root\u4e3a\u7528\u6237\u540d<\/p>\n

vim\u00a0\/etc\/vsftpd\/virtusers<\/p>\n

\u6dfb\u52a0\u5185\u5bb9<\/p>\n

test<\/p>\n

123456<\/p>\n

liu<\/p>\n

123456<\/p>\n

\n

\n
\n<\/div>\n

<\/a>4.\u751f\u6210\u7528\u6237\u6570\u636e\u6587\u4ef6<\/strong><\/p>\n

\u9996\u5148\u4f60\u9700\u8981\u786e\u5b9a\u4f60\u662f\u5426\u6709db_load\u8fd9\u4e2a\u547d\u4ee4<\/p>\n

rpm \u2013q \u00a0db<\/p>\n

\u5b89\u88c5\u4e4b\u524d\u5148\u67e5\u8be2\u4e00\u4e0b<\/p>\n

yum\u00a0 search\u00a0db4<\/p>\n

\u5b89\u88c5<\/p>\n

yum install-y\u00a0 compat-db47.x86_64\u00a0 (\u4ee5\u4f60\u7684\u673a\u5668\u4e3a\u51c6)<\/p>\n

\u751f\u6210db\u6587\u4ef6<\/p>\n

db_load -T -t hash-f \/etc\/vsftpd\/virtusers \/etc\/vsftpd\/virtusers.db<\/p>\n

\n

#\u8bbe\u5b9aPAM\u9a8c\u8bc1\u6587\u4ef6\uff0c\u5e76\u6307\u5b9a\u5bf9\u865a\u62df\u7528\u6237\u6570\u636e\u5e93<\/a>\u6587\u4ef6\u8fdb\u884c\u8bfb\u53d6<\/p>\n

chmod600\/etc\/vsftpd\/virtusers.db \u00a0\u00a0(\u6743\u9650r,w\u5373\u53ef)<\/p>\n

\n

\u00a0<\/strong><\/p>\n

\u00a0<\/strong><\/p>\n

5.\u00a0\u4fee\u6539\/etc\/pam.d\/vsftpd\u6587\u4ef6<\/strong><\/p>\n

# \u4fee\u6539\u524d\u5148\u5907\u4efd<\/p>\n

cp\u00a0\/etc\/pam.d\/vsftpd \/etc\/pam.d\/vsftpd.bak<\/p>\n

\n

# \u5c06auth\u53caaccount\u7684\u6240\u6709\u914d\u7f6e\u884c\u5747\u6ce8\u91ca\u6389<\/p>\n

vi\u00a0\/etc\/pam.d\/vsftpd<\/p>\n

\u5728\u91cc\u9762\u6dfb\u52a0\u8fd9\u4e24\u53e5\u8bdd<\/p>\n

auth sufficient\/lib64\/security\/pam_userdb.so db=\/etc\/vsftpd\/virtusers<\/p>\n

\n

account sufficient\/lib64\/security\/pam_userdb.so db=\/etc\/vsftpd\/virtusers<\/p>\n

\n

# \u5982\u679c\u7cfb\u7edf\u4e3a32\u4f4d\uff0c\u4e0a\u9762lib64\u6539\u4e3alib<\/p>\n

\n

\n
\n<\/div>\n

<\/a>6.\u65b0\u5efa\u7cfb\u7edf\u7528\u6237vsftpd\uff0c\u7528\u6237\u76ee\u5f55\u4e3a\/home\/vsftpd<\/strong><\/p>\n

#\u5148\u5728\u5bb6\u76ee\u5f55\u4e0b\u5efa\u7acbvsftpd\u6587\u4ef6\u5939\uff0c\u8fd9\u4e5f\u662f\u6211\u4eec\u8bbf\u95ee\u7684\u7a7a\u95f4<\/p>\n

mkdir -p \/home\/vsftpd<\/p>\n

\n

#\u7528\u6237\u767b\u5f55\u7ec8\u7aef\u8bbe\u4e3a\/bin\/false(\u5373\uff1a\u4f7f\u4e4b\u4e0d\u80fd\u767b\u5f55\u7cfb\u7edf)<\/p>\n

useradd vsftpd -d\/home\/vsftpd -s \/bin\/false<\/p>\n

chown\u00a0-R vsftpd:vsftpd \/home\/vsftpd<\/p>\n

\n

\n
\n<\/div>\n

<\/a>7.\u5efa\u7acb\u865a\u62df\u7528\u6237\u4e2a\u4eba\u914d\u7f6e\u6587\u4ef6<\/strong><\/p>\n

mkdir\u00a0\/etc\/vsftpd\/vconf<\/p>\n

cd\/etc\/vsftpd\/vconf<\/p>\n

\n

#\u8fd9\u91cc\u5efa\u7acb\u4e24\u4e2a\u865a\u62df\u7528\u6237\u914d\u5408\u6587\u4ef6<\/p>\n

touch\u00a0test liu<\/p>\n

\n

#\u5efa\u7acb\u7528\u6237\u6839\u76ee\u5f55<\/p>\n

mkdir\u00a0-p \/home\/vsftpd\/test\/<\/p>\n

\n

#\u7f16\u8f91test\u7528\u6237\u914d\u7f6e\u6587\u4ef6\uff0c\u5185\u5bb9\u5982\u4e0b\uff0c\u5176\u4ed6\u7528\u6237\u7c7b\u4f3c<\/p>\n

vi\u00a0test<\/p>\n

\n

local_root=\/home\/vsftpd\/test\/<\/p>\n

write_enable=YES<\/p>\n

anon_world_readable_only=NO<\/p>\n

anon_upload_enable=YES<\/p>\n

anon_mkdir_write_enable=YES<\/p>\n

anon_other_write_enable=YES<\/p>\n

\n

\n
\n<\/div>\n

<\/a>8.<\/strong>\u9632\u706b\u5899\u8bbe\u7f6e\uff08<\/strong>centos 7<\/strong>\uff09<\/strong><\/p>\n

#\u5982\u679c\u7cfb\u7edf\u542f\u7528\u4e86\u9632\u706b\u5899\u548cSELinux\uff0c\u90a3\u4e48\u8fd8\u8981\u505a\u4ee5\u4e0b\u914d\u7f6e(\u9ed8\u8ba4\u60c5\u51b5\u4e0bcentos7\u662f\u4f7f\u7528firewall\u548cselinux\u7684\uff0c\u4e0d\u5728\u4f7f\u7528iptables)<\/p>\n

\n

#\u9632\u706b\u5899\u6dfb\u52a0FTP\u670d\u52a1\uff1a<\/p>\n

[root@localhost vsftpd]#firewall-cmd –permanent –zone=public –add-service=ftp<\/p>\n

[root@localhost vsftpd]#firewall-cmd –reload<\/p>\n

#\u8bbe\u7f6eSELinux\uff1a<\/p>\n

[root@localhost vsftpd]#getsebool -a | grep ftp<\/p>\n

[root@localhost vsftpd]#setsebool -P ftpd_full_access on<\/p>\n

\n

9.\u00a0\u91cd\u542fvsftpd\u670d\u52a1\u5668<\/strong><\/p>\n

[root@localhostchris]# systemctl stop\u00a0 vsftpd.service<\/p>\n

[root@localhostchris]# systemctl start\u00a0 vsftpd.service<\/p>\n

[root@localhostchris]# systemctl status\u00a0 vsftpd.service<\/p>\n

\n

 <\/p>\n

10.\u00a0\u5728\/home\/vsftpd\/test\/\u4e0b\u9762\u4ef6\u51e0\u4e2a\u6587\u4ef6\u5939\u505a\u6d4b\u8bd5<\/a><\/strong><\/p>\n

mkdir \u00a0\/home\/vsftpd\/test\/test{1..5}<\/p>\n

11.\u00a0\u5728\u6d4f\u89c8\u5668\u6216\u8005\u6211\u7684\u7535\u8111\u91cc\u8f93\u5165ftp:\/\/192.168.163.126<\/a>(\u5c40\u57df\u7f51)\u6d4b\u8bd5<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"

\u5982\u679c\u662f\u5728\u865a\u62df\u673a\u4e2d\u8bd5\u9a8c\u7684\uff0c\u6700\u597d\u5148\u62cd\u6444\u5feb\u7167\u4ee5\u514d\u51fa\u73b0\u9519\u8bef\u65f6\u6062\u590d   1\uff0e\u5b89\u88c5vsftpd #\u9996\u5148\u8981\u67e5\u770b\u4f60\u662f\u5426\u5b89\u88c5vsftp \u00a0[root@localhost \/]# rpm -q vsftpd vsftpd-3.0.2-10.el7.x86_64 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\uff08\u663e\u793a\u4e5f\u5c31\u5b89\u88c5\u6210\u529f\u4e86\uff01\uff09 #\u5982\u679c\u6ca1\u6709\u5219\u5b89\u88c5vsftpd [root@localhost\/]# yum\u00a0 install -y\u00a0 vsftpd #\u5b8c\u6210\u540e\u518d\u68c0\u67e5\u4e00\u904d \u00a0[root@localhost \/]# […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[1],"tags":[],"class_list":["post-362","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/blog.jsjs.org\/index.php?rest_route=\/wp\/v2\/posts\/362","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.jsjs.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.jsjs.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.jsjs.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.jsjs.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=362"}],"version-history":[{"count":0,"href":"https:\/\/blog.jsjs.org\/index.php?rest_route=\/wp\/v2\/posts\/362\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.jsjs.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=362"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.jsjs.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=362"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.jsjs.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=362"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}