ubuntu16.04搭建ftp服务器

古城微笑少年丶 2022-05-15 04:05 259阅读 0赞

哎呀呀呀晕晕晕晕晕晕！先来叹气一波，花费了一天的时间

环境:虚拟机

搭建原因：虚拟机上挂载U盘失败后就想到了使用ftp文件上传下载，于是行动

搭建过程：ubuntu安装ftp很简单：

sudo apt-get update 
    
    sudo apt-get install vsftpd
    
    [vsftpd --version 检测是否安装]

ftp配置是很有学问的，必须要强调的是如果你的ftp服务无法启动，十有八九就是配置文件的配置错误

配置参考如下：

listen=NO
    listen_ipv6=YES
    
    # Allow anonymous FTP? (Disabled by default).
    anonymous_enable=NO
    
    # Uncomment this to allow local users to log in.
    local_enable=YES
    
    # Uncomment this to enable any form of FTP write command.
    write_enable=YES
    
    # Default umask for local users is 077. You may wish to change this to 022,
    # if your users expect that (022 is used by most other ftpd's)
    local_umask=022
    
    # Activate directory messages - messages given to remote users when they
    # go into a certain directory.
    dirmessage_enable=YES
    #
    # If enabled, vsftpd will display directory listings with the time
    # in  your  local  time  zone.  The default is to display GMT. The
    # times returned by the MDTM FTP command are also affected by this
    # option.
    use_localtime=YES
    #
    # Activate logging of uploads/downloads.
    xferlog_enable=YES
    #
    # Make sure PORT transfer connections originate from port 20 (ftp-data).
    connect_from_port_20=YES
    
    # You may override where the log file goes if you like. The default is shown
    # below.
    xferlog_file=/var/log/vsftpd.log
    #
    # If you want, you can have your log file in standard ftpd xferlog format.
    # Note that the default log file location is /var/log/xferlog in this case.
    xferlog_std_format=YES
    
    
    # You may fully customise the login banner string:
    ftpd_banner=Welcome to FTP service.
    
    
    # You may specify an explicit list of local users to chroot() to their home
    # directory. If chroot_local_user is YES, then this list becomes a list of
    # users to NOT chroot().
    # (Warning! chroot'ing can be very dangerous. If using chroot, make sure that
    # the user does not have write access to the top level directory within the
    # chroot)
    chroot_local_user=YES
    chroot_list_enable=YES
    # (default follows)
    chroot_list_file=/etc/vsftpd.chroot_list
    
    # This option should be the name of a directory which is empty.  Also, the
    # directory should not be writable by the ftp user. This directory is used
    # as a secure chroot() jail at times vsftpd does not require filesystem
    # access.
    secure_chroot_dir=/var/run/vsftpd/empty
    #
    # This string is the name of the PAM service vsftpd will use.
    # pam_service_name=vsftpd
    pam_service_name=ftp
    
    # This option specifies the location of the RSA certificate to use for SSL
    # encrypted connections.
    rsa_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem
    rsa_private_key_file=/etc/ssl/private/ssl-cert-snakeoil.key
    ssl_enable=NO
    
    #
    # Uncomment this to indicate that vsftpd use a utf8 filesystem.
    utf8_filesystem=YES

![复制代码][copycode.gif]

上面的配置文件中，我不是很熟悉，我挑一些我稍微知道的讲。
    
    listen=NO不了解，我查看了很多博客，这个设置的是YES，但是我设置成YES，登陆直接被拒绝。
    anonymous_enable=NO拒绝匿名登陆
    write_enable=YES设置可以上传文件，这个设置看需要个人需要
    xferlog_enable=YES开启日志记录
    xferlog_file=/var/log/vsftpd.log设置日志文件路径
    xferlog_std_format=YES设置日志格式为标准输出
    connect_from_port_20=YES绑定20端口
    ftpd_banner=Welcome to FTP service.欢迎语句，在使用shell时可以看到
    下面这几个的设置比较重要：
    
    chroot_local_user=YES
    chroot_list_enable=YES
    chroot_list_file=/etc/vsftpd.chroot_list 
    上面的这几个配置实现的功能是：用户被限制在自己的主目录下。用户名单来源于/etc/vsftpd.chroot_list。 
    具体可以参考：http://blog.csdn.net/bluishglc/article/details/42398811
    一个重要的配置
    
    pam_service_name=ftp原配置中为vsftpd，ubuntu用户需要更改成ftp
    关于编码：
    
    utf8_filesystem=YES 
    不知道这项有没有起作用，上传的文件不乱码，用浏览器打开是乱码（浏览器编码问题？），使用windows自带的文件资源管理器是没有乱码的，使用filezila乱码。
    创建用户:
    
    mkdir /home/username
    sudo useradd username -g ftp -d /home/username -m username
    sudo passwd username's password
    mkdir /home/username/pub
    chmod 777 -R /home/username/pub新建一个pub目录用于存放文件，并且赋予全部访问权限
    usermod -s /sbin/nologin username限制用户username只能通过ftp登陆，而不能直接登陆服务器
    
    重要的一点：
    
    新建/etc/vsftpd.chroot_list将username放进去
    启动vsftpd或者重启
    
    systemctl start vsftpd或者service vsftpd start
    systemctl restart vsftpd或者service vsftpd restart
    登陆：
    
    在windows的文件资源管理器或者在浏览器中打开ftp://your_server_ip输入账号密码，即可用登陆。浏览器中只能查看，文件操作如新建等需要在window的文件资源管理器中或者filezila中进行。

[copycode.gif]: /images/20220515/f5b9124c5d584029b618d29bab8111c4.png