亚洲免费在线-亚洲免费在线播放-亚洲免费在线观看-亚洲免费在线观看视频-亚洲免费在线看-亚洲免费在线视频

ubuntu 下安裝FTP服務器VSFTPD

系統 2124 0

? ? ? ? ? ?File Transfer Protocol (FTP) is a TCP protocol for uploading and downloading files between computers. FTP works on a client/server model. The server component is called an FTP daemon . It continuously listens for FTP requests from remote clients. When a request is received, it manages the login and sets up the connection. For the duration of the session it executes any of commands sent by the FTP client.

Access to an FTP server can be managed in two ways:

  • Anonymous

  • Authenticated

In the Anonymous mode, remote clients can access the FTP server by using the default user account called "anonymous" or "ftp" and sending an email address as the password. In the Authenticated mode a user must have an account and a password. User access to the FTP server directories and files is dependent on the permissions defined for the account used at login. As a general rule, the FTP daemon will hide the root directory of the FTP server and change it to the FTP Home directory. This hides the rest of the file system from remote sessions.

vsftpd - FTP Server Installation

vsftpd is an FTP daemon available in Ubuntu. It is easy to install, set up, and maintain. To install vsftpd you can run the following command:

      
        
          sudo apt-get install vsftpd
        
      
    

Anonymous FTP Configuration

By default vsftpd is configured to only allow anonymous download. During installation a ftp user is created with a home directory of /home/ftp . This is the default FTP directory.

If you wish to change this location, to /srv/ftp for example, simply create a directory in another location and change the ftp user's home directory:

      
        
          sudo mkdir /srv/ftp
        
      
      
        
          sudo usermod -d /srv/ftp ftp
        
      
    

After making the change restart vsftpd :

      
        
          sudo /etc/init.d/vsftpd restart
        
      
    

Finally, copy any files and directories you would like to make available through anonymous FTP to /srv/ftp .

User Authenticated FTP Configuration

To configure vsftpd to authenticate system users and allow them to upload files edit /etc/vsftpd.conf :

      local_enable=YES
write_enable=YES

    

Now restart vsftpd :

      
        
          sudo /etc/init.d/vsftpd restart
        
      
    

Now when system users login to FTP they will start in their home directories where they can download, upload, create directories, etc.

Similarly, by default, the anonymous users are not allowed to upload files to FTP server. To change this setting, you should uncomment the following line, and restart vsftpd :

      anon_upload_enable=YES

    
?

Enabling anonymous FTP upload can be an extreme security risk. It is best to not enable anonymous upload on servers accessed directly from the Internet.

The configuration file consists of many configuration parameters. The information about each parameter is available in the configuration file. Alternatively, you can refer to the man page, man 5 vsftpd.conf for details of each parameter.

Securing FTP

There are options in /etc/vsftpd.conf to help make vsftpd more secure. For example users can be limited to their home directories by uncommenting:

      chroot_local_user=YES

    

You can also limit a specific list of users to just their home directories:

      chroot_list_enable=YES
chroot_list_file=/etc/vsftpd.chroot_list

    

After uncommenting the above options, create a /etc/vsftpd.chroot_list containing a list of users one per line. Then restart vsftpd :

      
        
          sudo /etc/init.d/vsftpd restart
        
      
    

Also, the /etc/ftpusers file is a list of users that are disallowed FTP access. The default list includes root, daemon, nobody, etc. To disable FTP access for additional users simply add them to the list.

FTP can also be encrypted using FTPS . Different from SFTP , FTPS is FTP over Secure Socket Layer (SSL). SFTP is a FTP like session over an encrypted SSH connection. A major difference is that users of SFTP need to have a shell account on the system, instead of a nologin shell. Providing all users with a shell may not be ideal for some environments, such as a shared web host.

To configure FTPS , edit /etc/vsftpd.conf and at the bottom add:

      ssl_enable=Yes

    

Also, notice the certificate and key related options:

      rsa_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem
rsa_private_key_file=/etc/ssl/private/ssl-cert-snakeoil.key

    

By default these options are set the certificate and key provided by the ssl-cert package. In a production environment these should be replaced with a certificate and key generated for the specific host. For more information on certificates see the section called “Certificates” .

Now restart vsftpd , and non-anonymous users will be forced to use FTPS :

      
        
          sudo /etc/init.d/vsftpd restart
        
      
    

To allow users with a shell of /usr/sbin/nologin access to FTP, but have no shell access, edit /etc/shells adding the nologin shell:

      # /etc/shells: valid login shells
/bin/csh
/bin/sh
/usr/bin/es
/usr/bin/ksh
/bin/ksh
/usr/bin/rc
/usr/bin/tcsh
/bin/tcsh
/usr/bin/esh
/bin/dash
/bin/bash
/bin/rbash
/usr/bin/screen
/usr/sbin/nologin

    

This is necessary because, by default vsftpd uses PAM for authentication, and the /etc/pam.d/vsftpd configuration file contains:

      auth    required        pam_shells.so

    

The shells PAM module restricts access to shells listed in the /etc/shells file.

Most popular FTP clients can be configured connect using FTPS. The lftp command line FTP client has the ability to use FTPS as well. ? ? ? ? ? ? ? ? ?

?

?

?

use root to login ftp

vi /etc/ftpusers

then remove root from the file

?

?

ubuntu 下安裝FTP服務器VSFTPD


更多文章、技術交流、商務合作、聯系博主

微信掃碼或搜索:z360901061

微信掃一掃加我為好友

QQ號聯系: 360901061

您的支持是博主寫作最大的動力,如果您喜歡我的文章,感覺我的文章對您有幫助,請用微信掃描下面二維碼支持博主2元、5元、10元、20元等您想捐的金額吧,狠狠點擊下面給點支持吧,站長非常感激您!手機微信長按不能支付解決辦法:請將微信支付二維碼保存到相冊,切換到微信,然后點擊微信右上角掃一掃功能,選擇支付二維碼完成支付。

【本文對您有幫助就好】

您的支持是博主寫作最大的動力,如果您喜歡我的文章,感覺我的文章對您有幫助,請用微信掃描上面二維碼支持博主2元、5元、10元、自定義金額等您想捐的金額吧,站長會非常 感謝您的哦!!!

發表我的評論
最新評論 總共0條評論
主站蜘蛛池模板: 欧美一级久久 | 青青操网址| 8090碰成年女人免费碰碰尤物 | 日韩精品在线一区 | 特一级男女性色大片 | 欧美色网在线 | 99在线播放 | 香蕉成人在线视频 | 永久免费观看黄网站 | 四虎影免看黄 | 中国老妇色xxxxx | 一道本不卡免费视频 | 亚洲欧美日韩中文字幕在线一 | 国产 magnet| 欧美成人h | 欧美国产精品亚洲精品第一区 | 大片毛片| 欧美成人一区二区三区不卡视频 | 久久99综合国产精品亚洲首页 | 日韩亚洲成a人片在线观看 日韩亚洲第一页 | 久久久久久久久免费影院 | 色综合亚洲综合网站综合色 | 久久精品国产国语对白 | 日韩免费大片 | 欧美大狠狠大臿蕉香蕉大视频 | 福利视频影院 | 狠狠色婷婷狠狠狠亚洲综合 | 久久97久久97精品免视看清纯 | 欧美日本国产 | 日本美女视频韩国视频网站免费 | 亚洲成人中文 | 香蕉网站男人网站 | 韩国办公室激情 | 大色佬视频在线观看 | 99视频精品全部国产盗摄视频 | 91中文字幕yellow字幕网 | 性视频xxx| 国产精品二区高清在线 | h片在线 | 中文字幕亚洲精品第一区 | 亚洲精品久久午夜香蕉 |