centos8 vsftpd配置虚拟用户认证

1、建立Vsftpd虚拟宿主用户

useradd vftp -M -s /sbin/nologin -d /var/ftp/

2、创建虚拟用户的文件

[root@localhost vsftpd]# cat /etc/vsftpd/virtusers test test123456

3、生成虚拟用户口令文件和认证文件

db_load -T -t hash -f /etc/vsftpd/virtusers /etc/vsftpd/virtusers.db chmod 400 vuser_list.db

4、添加认证

[root@localhost vsftpd]# cat /etc/pam.d/vsftpd
#%PAM-1.0
auth required /lib64/security/pam_userdb.so db=/etc/vsftpd/vuser_list
account required /lib64/security/pam_userdb.so db=/etc/vsftpd/vuser_list

#session    optional     pam_keyinit.so    force revoke
#auth       required	pam_listfile.so item=user sense=deny file=/etc/vsftpd/ftpusers onerr=succeed
#auth       required	pam_shells.so
#auth       include	password-auth
#account    include	password-auth
#session    required     pam_loginuid.so
#session    include	password-auth

5、vsftpd.conf配置

mkdir /etc/vsftpd/vconf
mkdir /var/ftp/virtual
mkdir /var/ftp/virtual/test
chown -R vftp.vftp /var/ftp/virtual/

[root@localhost vsftpd]# cat vsftpd.conf
anonymous_enable=NO
local_enable=YES
write_enable=YES
local_umask=022
anon_upload_enable=NO
anon_mkdir_write_enable=NO
dirmessage_enable=YES
xferlog_enable=YES
connect_from_port_20=YES
chown_uploads=NO
xferlog_file=/var/log/vsftpd.log
xferlog_std_format=YES
async_abor_enable=YES
ascii_upload_enable=YES
ascii_download_enable=YES
ftpd_banner=Welcome to FTP Server
chroot_local_user=YES
ls_recurse_enable=NO
listen=YES
hide_ids=YES
pam_service_name=vsftpd
userlist_enable=NO
guest_enable=YES
guest_username=vftp
virtual_use_local_privs=YES
user_config_dir=/etc/vsftpd/vconf

6、配置虚拟用户配置

[root@localhost vsftpd]# cat /etc/vsftpd/vconf/test 
local_root=/var/ftp/virtual/test
anonymous_enable=NO
write_enable=YES
local_umask=022
anon_upload_enable=NO
anon_mkdir_write_enable=NO
idle_session_timeout=600
data_connection_timeout=120
max_clients=10
max_per_ip=5
local_max_rate=50000
allow_writeable_chroot=YES 

7、重启服务|测试

[root@localhost vsftpd]# systemctl restart vsftpd
[root@localhost vsftpd]# ftp
ftp> open 127.0.0.1
Connected to 127.0.0.1 (127.0.0.1).
220 Welcome to FTP Server
Name (127.0.0.1:root): test
331 Please specify the password.
Password:
230 Login successful.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> ls
227 Entering Passive Mode (127,0,0,1,65,5).
150 Here comes the directory listing.
226 Directory send OK.
ftp> dir
227 Entering Passive Mode (127,0,0,1,181,149).
150 Here comes the directory listing.
226 Directory send OK.
ftp>