{"id":6417,"date":"2017-01-03T11:35:48","date_gmt":"2017-01-03T03:35:48","guid":{"rendered":"http:\/\/rmohan.com\/?p=6417"},"modified":"2017-01-03T11:35:48","modified_gmt":"2017-01-03T03:35:48","slug":"centos-6-8-ftp-service-installation-and-configuration-based-on-local-users-and-virtual-users","status":"publish","type":"post","link":"https:\/\/mohan.sg\/?p=6417","title":{"rendered":"CentOS 6.8 ftp service installation and configuration based on local users and virtual users"},"content":{"rendered":"

CentOS 6.8 ftp service installation and configuration based on local users and virtual users<\/strong><\/p>\n

First, install ftp services<\/p>\n

1, check whether the installation<\/p>\n

# rpm -qa | grep ftp<\/p>\n

ftp-0.17-54.el6.x86_64<\/p>\n

vsftpd-2.2.2-21.el6.x86_64<\/p>\n

2, if not installed to install<\/p>\n

# yum -y install vsftp<\/p>\n

# yum -y install ftp<\/p>\n

\/ \/ If the offline environment on the Internet to go ahead to download ftp rpm package for manual installation<\/p>\n

3, ftp service command<\/p>\n

# \/etc\/init.d\/vsftpd start\u00a0\u00a0\u00a0\u00a0\u00a0 Start the ftp service manually<\/p>\n

service vsftpd start<\/p>\n

# chkconfig vsftpd on\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 set to boot from the start<\/p>\n

# service vsftpd stop<\/p>\n

# service vsftpd restart<\/p>\n

# service vsftpd status<\/p>\n

Second, the allocation of ftp<\/p>\n

1, configure the vsftpd configuration file<\/p>\n

# vi \/etc\/vsftpd\/vsftpd.conf<\/p>\n

# Disable anonymous user anonymous login<\/p>\n

anonymous_enable=NO<\/p>\n

# Enable the local user to log in<\/p>\n

local_enable=YES<\/p>\n

# Make the logged-in user have write permission (upload, delete)<\/p>\n

write_enable=YES<\/p>\n

# Default umask<\/p>\n

local_umask=022<\/p>\n

# Save the log of the transfer log to \/var\/log\/vsftpd.log<\/p>\n

xferlog_enable=YES<\/p>\n

xferlog_file=\/var\/log\/vsftpd.log<\/p>\n

xferlog_std_format=NO<\/p>\n

# Enable ASCII mode<\/p>\n

ascii_upload_enable=YES<\/p>\n

# Enable the ASCII mode download<\/p>\n

ascii_download_enable=YES<\/p>\n

# Use port 20 to transmit data<\/p>\n

connect_from_port_20=YES<\/p>\n

# Welcome slogan<\/p>\n

ftpd_banner=Welcome to use my test ftp server.<\/p>\n

# The next three configurations are important
\n# Chroot_local_user set YES, then all users will be chroot by default,<\/p>\n

# Also the user directory is limited to their own home, can not change the directory up.<\/p>\n

# Chroot_list_enable Set YES to enable the chroot user list.<\/p>\n

# If chroot_local_user is set to YES, then chroot_list_file<\/p>\n

# Set the file, the user is not chroot (you can change the directory up)<\/p>\n

# If chroot_local_user is set to NO, then chroot_list_file<\/p>\n

# Set the file, the user is chroot (can not change the directory up)<\/p>\n

chroot_list_enable=YES<\/p>\n

# touch \/etc\/vsftpd\/chroot_list New<\/p>\n

chroot_list_file=\/etc\/vsftpd\/chroot_list<\/p>\n

use_localtime=YES<\/p>\n

# Run on ipv4 in standalone mode<\/p>\n

listen=YES<\/p>\n

# PAM authentication service name, here is the default vsftpd, when the installation has been created vsftpd the pam file,<\/p>\n

# In \/etc\/pam.d\/vsftpd, according to the pam file settings, \/ etc \/ vsftpd \/ ftpusers<\/p>\n

# File users will be prohibited from logging in ftp server, such as root so sensitive to the user, so you want to prohibit other users<\/p>\n

# Log in, you can also add the user to \/etc\/vsftpd\/ftpusers<\/p>\n

pam_service_name=vsftpd<\/p>\n

* Reboot vsftpd<\/p>\n

# service vsftpd restart<\/p>\n

Third, create a local user<\/p>\n

Create a user<\/p>\n

# useradd -d \/home\/ftpuser\/zzp -s \/sbin\/nologin -M zzp123<\/p>\n

Set the user to the folder<\/p>\n

# chown -R username \/home\/ftpuser\/zzp<\/p>\n

Setting permissions<\/p>\n

# chown -R 777 \/home\/ftpuser\/zzp<\/p>\n

Add a password<\/p>\n

# passwd zzp<\/p>\n

Fourth, create a virtual user<\/p>\n

Install the Generating Tool for file-based authentication databases based on common files<\/p>\n

# rpm -qa | grep db4-utils<\/p>\n

# yum -y install db4-utils<\/p>\n

Edit the virtual user account and password file, the odd-line user name, and even-action passwords<\/p>\n

# vi \/etc\/vsftpd\/vu.txt<\/p>\n

test<\/p>\n

1234<\/p>\n

…<\/p>\n

usernameN<\/p>\n

passwordN<\/p>\n

File-based database generation for authentication<\/p>\n

# db_load -T -t hash -f \/etc\/vsftpd\/vu.txt \/etc\/vsftpd\/vu.db<\/p>\n

Modify permissions<\/p>\n

# chmod 600 \/etc\/vsftpd\/vu.*<\/p>\n

Modify the default VSFTP authentication mode, based on just generated file-based database<\/p>\n

# vi \/etc\/pam.d\/vsftpd.vu<\/p>\n

auth\u00a0\u00a0\u00a0\u00a0\u00a0 required\u00a0 \/lib64\/security\/pam_userdb.so db=\/etc\/vsftpd\/vu<\/p>\n

account\u00a0 required\u00a0 \/lib64\/security\/pam_userdb.so db=\/etc\/vsftpd\/vu<\/p>\n

**note**:<\/p>\n

1. The system acquiescence to read the document is \/etc\/pam.d\/vsftpd This can also be added directly to the above content<\/p>\n

2. 64-bit system may not recognize the path of pam_userdb.so db, it is necessary to write the full path, otherwise the time will be logged in ftp login login incorrect error 530<\/p>\n

Create a system user that maps virtual users<\/p>\n

# useradd\u00a0 -d \/home\/vsftp\/ftp -s \/sbin\/nologin -M vsftp<\/p>\n

Create a virtual user profile directory<\/p>\n

# mkdir \/etc\/vsftpd\/conf.vu<\/p>\n

Modify the VSFTP configuration file<\/p>\n

# vi \/etc\/vsftpd\/vsftpd.conf
\nanon_umask=022\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 # file 644, folder 755
\nanonymous_enable=NO\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 # Turn off anonymous logins
\npam_service_name=vsftpd.vu\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Modify the PAM authentication module (the system default is vsftpd)
\nguest_enable=YES\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 # Allow the virtual user to log in
\nguest_username=vsftp\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 # The system user who mapped the virtual user
\nuser_config_dir=\/etc\/vsftpd\/conf.vu\u00a0\u00a0\u00a0 # The virtual user profile directory
\npasv_enable=YES\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 # Passive mode
\npasv_max_port=20999\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 # Maximum port
\npasv_min_port=20000\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 # minimum port
\nxferlog_enable=YES
\nxferlog_std_format=YES
\nxferlog_file=\/var\/log\/xferlog\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 # Log: record upload, download, delete, create
\ndual_log_enable=YES
\nvsftpd_log_file=\/var\/log\/vsftpd.log\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 # Log: Server transfer log<\/p>\n

Create the virtual user’s directory and configuration file<\/p>\n

# mkdir \/home\/vsftp\/ftp\/username
\n# chmod 700 \/home\/vsftp\/ftp\/username
\n# chown vsftp.vsftp \/home\/vsftp\/ftp\/username
\n# vi \/etc\/vsftpd\/conf.vu\/username
\nwrite_enable=YES\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 # The current virtual user write permission
\nanon_world_readable_only=NO\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 # Current virtual user download permissions
\nanon_upload_enable=YES\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 # The current virtual user upload privilege
\nanon_mkdir_write_enable=YES\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 # Create the directory permissions for the current virtual user
\nanon_other_write_enable=YES\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 # Delete and rename permissions for the current virtual user
\nlocal_root=\/bigdisk\/ftp\/username1\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 # Current virtual home directory
\n# chmod 600 \/etc\/vsftpd\/conf.vu\/*<\/p>\n

Finally restart vsftpd<\/p>\n

# service vsftpd restart<\/p>\n","protected":false},"excerpt":{"rendered":"

CentOS 6.8 ftp service installation and configuration based on local users and virtual users<\/p>\n

First, install ftp services<\/p>\n

1, check whether the installation<\/p>\n

# rpm -qa | grep ftp<\/p>\n

ftp-0.17-54.el6.x86_64<\/p>\n

vsftpd-2.2.2-21.el6.x86_64<\/p>\n

2, if not installed to install<\/p>\n

# yum -y install vsftp<\/p>\n

# yum -y install ftp<\/p>\n

\/ \/ If the offline environment on the […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[14],"tags":[],"_links":{"self":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts\/6417"}],"collection":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=6417"}],"version-history":[{"count":1,"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts\/6417\/revisions"}],"predecessor-version":[{"id":6418,"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts\/6417\/revisions\/6418"}],"wp:attachment":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6417"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6417"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6417"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}