服务器配置规划：
sftp 默认安装linux 后开启，windows用户需要安装工具连接。
ftp 安装vsftpd服务，配置虚拟用户，制定上传下载目录
samba:服务安装samba服务器，配置共享目录，设定特定访问权限，和所有人访问权限。访问方式windows 下 \\ip 访问。
httpd :配置文件http方式下载，仅用于浏览器实现文件下载。
系统配置
虚拟机 Oracle VM VirtualBox 6.1
linux centos7.6 最小化安装
配置本地光盘源 文件/etc/yum.repos.d/CentOS-CR.repo
[cr] name=CentOS-$releasever - cr baseurl=file:///mnt/ gpgcheck=1 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7 enabled=1
安装ftp 服务
[root@localhost ~]# yum install vsftpd -y Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile cr | 3.6 kB 00:00:00 Resolving Dependencies --> Running transaction check ---> Package vsftpd.x86_64 0:3.0.2-25.el7 will be installed --> Finished Dependency Resolution Dependencies Resolved ================================================================================================================================================= Package Arch Version Repository Size ================================================================================================================================================= Installing: vsftpd x86_64 3.0.2-25.el7 cr 171 k Transaction Summary ================================================================================================================================================= Install 1 Package Total download size: 171 k Installed size: 353 k Downloading packages: Running transaction check Running transaction test Transaction test succeeded Running transaction Installing : vsftpd-3.0.2-25.el7.x86_64 1/1 Verifying : vsftpd-3.0.2-25.el7.x86_64 1/1 Installed: vsftpd.x86_64 0:3.0.2-25.el7 Complete! [root@localhost ~]#
启动vsftpd服务
[root@localhost ~]# systemctl status vsftpd
● vsftpd.service - Vsftpd ftp daemon
Loaded: loaded (/usr/lib/systemd/system/vsftpd.service; disabled; vendor preset: disabled)
Active: inactive (dead)
[root@localhost ~]# systemctl start vsftpd
[root@localhost ~]# systemctl status vsftpd
● vsftpd.service - Vsftpd ftp daemon
Loaded: loaded (/usr/lib/systemd/system/vsftpd.service; disabled; vendor preset: disabled)
Active: active (running) since Tue 2022-08-30 23:16:57 EDT; 1s ago
Process: 3787 ExecStart=/usr/sbin/vsftpd /etc/vsftpd/vsftpd.conf (code=exited, status=0/SUCCESS)
Main PID: 3788 (vsftpd)
CGroup: /system.slice/vsftpd.service
└─3788 /usr/sbin/vsftpd /etc/vsftpd/vsftpd.conf
Aug 30 23:16:57 localhost.localdomain systemd[1]: Starting Vsftpd ftp daemon...
Aug 30 23:16:57 localhost.localdomain systemd[1]: Started Vsftpd ftp daemon.
[root@localhost ~]#
创建用户用于配置ftp主账户，虚拟账户权限映射到此用户
[root@localhost ~]# useradd -s /usr/sbin/nologin admin [root@localhost ~]# echo "admin" | passwd --stdin admin Changing password for user admin. passwd: all authentication tokens updated successfully. [root@localhost ~]# id admin uid=1000(admin) gid=1000(admin) groups=1000(admin) [root@localhost ~]# mkdir /data [root@localhost ~]# chown -R admin:admin /data [root@localhost ~]# ls -ld /data drwxr-xr-x. 2 admin admin 6 Aug 30 23:20 /data [root@localhost ~]#
停止防火墙，关掉selinux
[root@localhost vsftpd]# systemctl stop firewalld [root@localhost vsftpd]# systemctl disable firewalld [root@localhost vsftpd]# cat /etc/selinux/config # This file controls the state of SELinux on the system. # SELINUX= can take one of these three values: # enforcing - SELinux security policy is enforced. # permissive - SELinux prints warnings instead of enforcing. # disabled - No SELinux policy is loaded. SELINUX=disabled # SELINUXTYPE= can take one of three values: # targeted - Targeted processes are protected, # minimum - Modification of targeted policy. Only selected processes are protected. # mls - Multi Level Security protection. SELINUXTYPE=targeted [root@localhost vsftpd]#
关闭selnux 之后重启系统
配置vsftpd.conf，配置参考
chroot_list_file=/etc/vsftpd/chroot_list 配置限制用户登陆ftp后切换家目录。
user_config_dir=/etc/vsftpd/vir_user_conf 配置虚拟用户配置文件目录。
vi vsftpd.conf 如下配置文件
anonymous_enable=NO chroot_local_user=NO chroot_list_enable=YES chroot_list_file=/etc/vsftpd/chroot_list allow_writeable_chroot=YES local_enable=YES write_enable=YES local_umask=022 dirmessage_enable=YES xferlog_enable=YES connect_from_port_20=YES xferlog_std_format=YES listen=NO listen_ipv6=YES userlist_enable=YES tcp_wrappers=YES pam_service_name=vsftpd guest_enable=YES guest_username=admin user_config_dir=/etc/vsftpd/vir_user_conf virtual_use_local_privs=YES
配置vsftpd，配置虚拟用户，创建v_user.txt 编辑加入分别为账号密码分别一行，这里配置了三个虚拟用户，admin,admin1,admin2。
[root@localhost vsftpd]# cat v_user.txt admin admin admin1 admin1 admin2 admin2 [root@localhost vsftpd]# db_load -T -t hash -f v_user.txt v_user.db [root@localhost vsftpd]# ls ftpusers user_list vsftpd.conf vsftpd_conf_migrate.sh v_user.db v_user.txt
虚拟用户配置文件，创建vir_user_conf，目录下创建针对虚拟用户的配置文件，创建三个用户登陆的家目录分别为/data/ftp/{admin,admin1,admin2},用户配置文件为 /etc/vsftpd/vir_user_conf/{admin,admin1,admin2}，最后需要修改/data/ftp/目录文件为admin:admin
[root@localhost vsftpd]# mkdir -p /etc/vsftpd/vir_user_conf/
[root@localhost vsftpd]# mkdir -p /data/ftp/{admin,admin1,admin2}
[root@localhost vsftpd]# touch /etc/vsftpd/vir_user_conf/{admin,admin1,admin2}
[root@localhost vsftpd]# touch /data/ftp/admin/admin-test
[root@localhost vsftpd]# touch /data/ftp/admin1/admin1-test
[root@localhost vsftpd]# touch /data/ftp/admin2/admin2-test
[root@localhost vsftpd]# chown -R admin:admin /data/
[root@localhost vsftpd]# ls -lR /data/ftp/
/data/ftp/:
total 0
drwxr-xr-x. 2 admin admin 24 Aug 30 23:44 admin
drwxr-xr-x. 2 admin admin 25 Aug 30 23:44 admin1
drwxr-xr-x. 2 admin admin 25 Aug 30 23:44 admin2
/data/ftp/admin:
total 0
-rw-r--r--. 1 admin admin 0 Aug 30 23:44 admin-test
/data/ftp/admin1:
total 0
-rw-r--r--. 1 admin admin 0 Aug 30 23:44 admin1-test
/data/ftp/admin2:
total 0
-rw-r--r--. 1 admin admin 0 Aug 30 23:44 admin2-test
[root@localhost vsftpd]#
admin用户配置文件
local_root=/data/ftp/admin write_enable=YES anon_world_readable_only=YES anon_upload_enable=YES anon_mkdir_write_enable=YES anon_other_write_enable=YES
admin1用户配置文件
local_root=/data/ftp/admin1 write_enable=YES anon_world_readable_only=YES anon_upload_enable=YES anon_mkdir_write_enable=YES anon_other_write_enable=YES
admin2配置文件
local_root=/data/ftp/admin2 write_enable=YES anon_world_readable_only=YES anon_upload_enable=YES anon_mkdir_write_enable=YES anon_other_write_enable=YES
配置pam文件/etc/pam.d/vsftpd，加入以下文本，其余的注释掉
auth required pam_userdb.so db=/etc/vsftpd/v_user account required pam_userdb.so db=/etc/vsftpd/v_user
限制ftp用户切换目录，将需要限制的用户加入chroot_list
[root@localhost vsftpd]# cat chroot_list admin [root@localhost vsftpd]#
重启vsftpd，登陆验证
登陆admin，验证切换目录，验证文件上传
文件上传成功，切换目录限制成功，用户不能切换到其他目录
验证admin1 用户，验证切换目录，验证文件上传
验证成功，用户上传成功，用户无限制，可以切换目录。
验证admin2 用户，验证切换目录，验证文件上传
文件上传下载成功，目录切换无限制，可以切换根目录。
标签：ftp,httpd,admin,sftp,vsftpd,YES,root,localhost From： https://www.cnblogs.com/wenxiao1-2-3-4/p/16642550.html