<pre name="code" class="sql"><pre name="code" class="sql"><pre name="code" class="sql">配置虚拟用户（使用db实现）
------------------------------------------------------------------
（1）查看系统是否有相应软件包
haproxy:/etc/haproxy# rpm -qa | grep vsftp
haproxy:/etc/haproxy# yum install vsftpd-2.2.2-13.el6_6.1.x86_64
# rpm –qa | grep db4
db4-devel-4.2.52-7.1
db4-4.2.52-7.1
db4-utils-4.2.52-7.1
（2）建立一个logins.txt的文件，单行为用户名，双行为密码，例如
# vim /etc/vsftpd/virtual_user
ftpzjcap
1234567
haproxy:/etc/vsftpd# ls -ltr
total 24
-rwxr--r-- 1 root root 338 Oct 18 2014 vsftpd_conf_migrate.sh
-rw------- 1 root root 4599 Oct 18 2014 vsftpd.conf
-rw------- 1 root root 361 Oct 18 2014 user_list
-rw------- 1 root root 125 Oct 18 2014 ftpusers
-rw-r--r-- 1 root root 17 May 19 10:45 virtual_user
（3）建立数据库文件并设置文件属性
# db_load -T -t hash -f /etc/vsftpd/virtual_user /etc/vsftpd/virtual_user.db
# chmod 600 /etc/vsftpd/virtual_user.db
haproxy:/etc/vsftpd# ls -ltr
total 36
-rwxr--r-- 1 root root 338 Oct 18 2014 vsftpd_conf_migrate.sh
-rw------- 1 root root 4599 Oct 18 2014 vsftpd.conf
-rw------- 1 root root 361 Oct 18 2014 user_list
-rw------- 1 root root 125 Oct 18 2014 ftpusers
-rw-r--r-- 1 root root 17 May 19 10:45 virtual_user
-rw-r--r-- 1 root root 12288 May 19 10:45 virtual_user.db
（4）建立认证文件
# vim /etc/pam.d/vsftpd 插入如下两行
##%PAM-1.0
#session optional pam_keyinit.so force revoke
#auth required pam_listfile.so item=user sense=deny file=/etc/vsftpd/ftpusers onerr=succeed
#auth required pam_shells.so
#auth include password-auth
#account include password-auth
#session required pam_loginuid.so
#session include password-auth
auth required pam_userdb.so db=/etc/vsftpd/virtual_user ###没有db结尾
account required pam_userdb.so db=/etc/vsftpd/virtual_user ###没有db结尾
（5）编写配置文件
# vim /etc/vsftpd/vsftpd.conf
haproxy:/etc/vsftpd# grep -v "^#" vsftpd.conf
anonymous_enable=NO
local_enable=YES
write_enable=YES
local_umask=022
dirmessage_enable=YES
xferlog_enable=YES
connect_from_port_20=YES
xferlog_std_format=YES
ascii_upload_enable=YES
ascii_download_enable=YES
chroot_list_enable=YES
listen=YES
pam_service_name=vsftpd
userlist_enable=YES
tcp_wrappers=YES
guest_enable=YES
user_config_dir=/etc/vsftpd/vuser_conf
6)
v-lhb-nfs01:/root# mkdir -p /etc/vsftpd/vuser_conf
v-dev-redis01:/etc/vsftpd/vuser_conf# cat ftpzjcap
local_root=/t/deploy/zjdev/nfs/images
write_enable=YES
anon_umask=022
anon_world_readable_only=NO
anon_upload_enable=YES
anon_mkdir_write_enable=YES
anon_other_write_enable=YES
7)报错:
500 OOPS: could not read chroot() list file:/etc/vsftpd/chroot_list
v-lhb-nfs01:/root# touch /etc/vsftpd/chroot_list
v-lhb-nfs01:/root# chmod 644 /etc/vsftpd/chroot_list
haproxy:/etc/vsftpd/vuser_conf# ftp 192.168.32.173
Connected to 192.168.32.173 (192.168.32.173).
220 (vsFTPd 2.2.2)
Name (192.168.32.173:root): ftpzjcap
331 Please specify the password.
Password:
530 Login incorrect.
Login failed.
报错信息如下:
haproxy:/etc/vsftpd/vuser_conf# tail -100 /var/log/secure
May 19 11:06:28 haproxy vsftpd[27543]: pam_succeed_if(vsftpd:auth): error retrieving information about user ftpzjcap
May 19 11:09:05 haproxy vsftpd[27574]: PAM unable to dlopen(/lib/security/pam_userdb.so): /lib/security/pam_userdb.so: cannot open shared object file: No such file or directory
May 19 11:09:05 haproxy vsftpd[27574]: PAM adding faulty module: /lib/security/pam_userdb.so
May 19 11:09:05 haproxy vsftpd[27574]: pam_unix(vsftpd:auth): check pass; user unknown
May 19 11:09:05 haproxy vsftpd[27574]: pam_unix(vsftpd:auth): authentication failure; logname= uid=0 euid=0 tty=ftp ruser=ftpzjcap rhost=192.168.33.29
May 19 11:09:05 haproxy vsftpd[27574]: pam_succeed_if(vsftpd:auth): error retrieving information about user ftpzjcap
没有/lib/security/pam_userdb.so文件,修改为
auth required pam_userdb.so db=/etc/vsftpd/vuser_passwd
account required pam_userdb.so db=/etc/vsftpd/vuser_passwd
pam_userdb(vsftpd:auth): user_lookup: could not open database
May 19 11:15:38 haproxy vsftpd[27631]: pam_unix(vsftpd:auth): check pass; user unknown
May 19 11:15:38 haproxy vsftpd[27631]: pam_unix(vsftpd:auth): authentication failure; logname= uid=0 euid=0 tty=ftp ruser=ftpzjcap rhost=192.168.32.173
May 19 11:15:38 haproxy vsftpd[27631]: pam_succeed_if(vsftpd:auth): error retrieving information about user ftpzjcap
May 19 11:15:38 haproxy vsftpd[27631]: pam_succeed_if(vsftpd:auth): error retrieving information about user ftpzjcap
May 19 11:18:49 haproxy vsftpd[27660]: pam_userdb(vsftpd:auth): user_lookup: could not open database `/etc/vsftpd/vuser_passwd': No such file or directory
haproxy:/etc/vsftpd# cat /etc/pam.d/vsftpd
##%PAM-1.0
#session optional pam_keyinit.so force revoke
#auth required pam_listfile.so item=user sense=deny file=/etc/vsftpd/ftpusers onerr=succeed
#auth required pam_shells.so
#auth include password-auth
#account include password-auth
#session required pam_loginuid.so
#session include password-auth
auth required pam_userdb.so db=/etc/vsftpd/virtual_user
account required pam_userdb.so db=/etc/vsftpd/virtual_user
haproxy:/etc/vsftpd# ls -ltr *db
-rw-r--r-- 1 root root 12288 May 19 10:45 virtual_user.db