According to the development requirements of the company's business development department and marketing department, you need to set up an Internet-facing FTP file server to provide the public beta software, market data download and upload, document management and other applications, while users access and download / upload traffic control. Taking into account the efficiency and operational stability, security, server, and choose to build vsftpd server implementation in RHEL5 operating system.
Description of Requirement:
Ø using FTP virtual user mode, add four user devadm, sales, saleadm, sxw.
Ø file permissions and user access control:
² devadm users can manage the server "/ var / ftproot / soft" directory.
² sxw user can download data server "/ var / ftproot / soft" directory.
² users can download sales information server "/ var / market" directory.
² salesadm user can manage the server "/ var / market" directory.
² All files uploaded via FTP accounts, unless it is a privilege to write all Theme (about to set permissions mask 022).
² other directories on the server without express authorization are prohibited over user access.
Ø download, upload traffic and bandwidth control:
² allows up to 150 concurrent user connections, number of concurrent connections per IP not more than five.
² sales users download bandwidth is limited to 100KB / s. Really slow!
² user sxw no limit, all the download speed fast!
² dvadm, saleadm users to download, upload bandwidth limit of 500KB / s. Obviously speed is much faster!
Recommended steps:
(1) to create a virtual user database.
/etc/vsftpd/vusers.list vi
vsftpd directory: db_load hash -T -t -f vusers.list vusers.db
(2) establishes a mapping user and FTP directory.
-d the useradd / var / ftproot -s / sbin / nologin Virtual
(. 3) is provided for the user's virtual PAM file.
vi /etc/pam.d/vsftpd.vu an input:
Aust required pam_userdb.so DB = / etc / the vsftpd / Vusers
Account required pam_userdb.so DB = / etc / the vsftpd / Vusers
(. 4) to modify the main configuration file vsftpd.conf enable virtual user support, add bandwidth limitations.
(5) for the establishment of a separate virtual user profiles, respectively, to give permission.
(6) vsftpd restart the service.
(7) verification results. Verify success! ! !
