Linux网络配置之FTP配置详细教学

 #允许匿名用户登录
 anonymous_enable=no

 #本地用户登录服务器所访问的路径
 local_root=/var/shnftp

 #登录时显示欢迎信息,如果设置了banner_file则此设置无效
 ftpd_banner=欢迎登录shn'ftp服务器。
 #登录用户允许使用ls -R命令,(一般禁止,服务器开销巨大)
 #ls_recurse_enable=YES
 #是定服务器在StandAlone模式下,不依赖于xinetd,可以独立启动
 listen=YES
 listen_address=10.10.1.10

 # SSL/TLS加密 先No 后面使用SSL再开启
 ssl_enable=No

useradd shnsftp1 -s /sbin/nologin
passwd shnsftp1

mkdir shnsftp
chown -R shnsftp1.shnsftp1 /shnsftp
chmod 777 shnsftp
touch shnsftp/tests1

cp /etc/vsftpd/vsftpd.conf /etc/vsftpd/vsftpd_user_conf/shnsftp1

 #全局控制-可以上传
  write_enable=no 
 #设置允许下载
 download_enable=yes

 #本地用户登录服务器所访问的路径
 local_root=/shnsftp
 #允许匿名用户上传
 anon_upload_enable=no

 #设定vsftpd的服务日志保存路径(默认不存在,必须手动touch,并提升权限)
 #xferlog_file=/var/log/xferlog
 #设定日志使用标准的记录格式

shnvftp1
shnvftp1

 auth    sufficient /lib/security/pam_userdb.so db=/etc/vsftpd/login

 account sufficient /lib/security/pam_userdb.so db=/etc/vsftpd/login

# openssl req -x509 -days 365 -newkey rsa:2048 -nodes -keyout /etc/vsftpd/vsftpd.pem -out /etc/vsftpd/vsftpd.pem                                   // 创建 SSL
Generating a 2048 bit RSA private key
.............................................+++
....+++
writing new private key to '/etc/vsftpd/vsftpd.pem'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [GB]:cn                                  // 国家
State or Province Name (full name) [Berkshire]:ln                     // 省
Locality Name (eg, city) [Newbury]:ltu                                // 城市
Organization Name (eg, company) [My Company Ltd]:soft                 // 组织
Organizational Unit Name (eg, section) []:network                     // 单位名称
Common Name (eg, your name or your server's hostname) []:localhost    // 主机名称        
Email Address []:
# chmod 600 vsftpd.pem                                                // 授权权限

# ftp 10.10.1.10                                                // 连接 ftp
Connected to 10.10.1.10.
220 欢迎登录shn'ftp服务器。
530 Please login with USER and PASS.
530 Please login with USER and PASS.
KERBEROS_V4 rejected as an authentication type
Name (10.10.1.10:root): shnmftp1                              // 登录
331 Please specify the password.
Password:                                                     // 密码
230 Login successful.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> ls                                                       // 查看
227 Entering Passive Mode (10,10,1,10,247,9)
150 Here comes the directory listing.
-rw-r--r--    1 0        0               0 May 13 06:14 m1
drwx------    2 603      603          4096 May 20 03:31 shnm
226 Directory send OK.
ftp> get m1 /var/m99                                          // 下载
local: /var/m99 remote: m1
227 Entering Passive Mode (10,10,1,10,35,242)
150 Opening BINARY mode data connection for m1 (0 bytes).
226 File send OK.
ftp> put /var/m99 ./s99                                      // 上传
local: /var/m99 remote: ./s99
227 Entering Passive Mode (10,10,1,10,244,124)
150 Ok to send data.
226 File receive OK.
ftp> delete s99                                              // 删除
250 Delete operation successful.
ftp> quit                                                    // 退出
221 Goodbye.