CentOS 7 vsftpd服务器搭建记录——筑梦之路

centos 7 vsftp 服务器搭建记录

yum install vsftpd -y


配置文件示例

anonymous_enable=NO
local_enable=YES
write_enable=YES
local_umask=022
dirmessage_enable=YES
xferlog_enable=YES
connect_from_port_20=YES
xferlog_std_format=YES
idle_session_timeout=600
ascii_upload_enable=YES
ascii_download_enable=YES
listen=YES

pam_service_name=vsftpd
userlist_enable=YES
userlist_deny=NO
userlist_file=/etc/vsftpd/user_list
tcp_wrappers=YES
local_root=/home/ftpuser
pasv_enable=YES
pasv_max_port=30010
pasv_min_port=30000
pasv_promiscuous=YES

use_localtime=YES


useradd ftpuser -s /sbin/nologin
passwd ftpuser

vim /etc/vsftpd/user_list
ftpuser


systemctl start vsftpd
systemctl enable vsftpd

修改 /etc/pam.d/vsftpd

#auth  required    pam_shells.so	#注释此行
此处是解决nologin不能登录的问题

配置ssl加密

ssl_enable=yes            ###开启ssl
ssl_sslv2=yes
ssl_sslv3=yes
ssl_tlsv1=yes
force_local_logins_ssl=yes   ###定义登录强制ssl,数据传输ssl
force_local_data_ssl=yes
rsa_cert_file=/etc/vsftpd/.sslkey/vsftpd.perm            ###ssl证书位置



yum install openssl

cd /etc/vsftpd

mkdir .sslkey
cd .sslkey

openssl req -new -x509  -nodes -out vsftpd.perm  -keyout vsftpd.perm      ###生成ssl证书秘钥

chmod 400 vsftpd.perm