{"id":708,"date":"2013-04-02T19:15:19","date_gmt":"2013-04-02T17:15:19","guid":{"rendered":"http:\/\/blog.rabahi.net\/?page_id=708"},"modified":"2014-08-04T17:41:09","modified_gmt":"2014-08-04T15:41:09","slug":"srv-ftp","status":"publish","type":"page","link":"https:\/\/blog.rabahi.net\/?page_id=708","title":{"rendered":"srv-ftp"},"content":{"rendered":"

Prerequiste<\/h1>\n

I assume that you have a Centos installation.<\/p>\n

Installation<\/h1>\n

You can copy\/paste this script and use it to configure automatically your server.<\/p>\n

  1. #!\/bin\/bash<\/span><\/div><\/li>
  2.  <\/div><\/li>
  3. echo<\/span> "install vsftpd"<\/span><\/div><\/li>
  4. dnf -y<\/span> install<\/span> vsftpd #pam_mysql<\/span><\/div><\/li>
  5.  <\/div><\/li>
  6. echo<\/span> "create firewall service"<\/span><\/div><\/li>
  7. cat<\/span> ><\/span> \/<\/span>etc\/<\/span>firewalld\/<\/span>services\/<\/span>vsftp.xml <<<\/span> "EOF"<\/span><\/div><\/li>
  8. <<\/span>?xml version<\/span>="1.0"<\/span> encoding<\/span>="utf-8"<\/span>?><\/span><\/div><\/li>
  9. <<\/span>service><\/span><\/div><\/li>
  10.  <<\/span>short><\/span>vsftp<\/<\/span>short><\/span><\/div><\/li>
  11.  <<\/span>description><\/span>ftp<\/span> server<\/<\/span>description><\/span><\/div><\/li>
  12.  <<\/span>port protocol<\/span>="tcp"<\/span> port<\/span>="21"<\/span>\/><\/span><\/div><\/li>
  13. <\/<\/span>service><\/span><\/div><\/li>
  14. EOF<\/div><\/li>
  15.  <\/div><\/li>
  16. echo<\/span> "add service vsftp (port 21) to firewall"<\/span><\/div><\/li>
  17. firewall-cmd --permanent<\/span> --add-service<\/span> vsftp<\/div><\/li>
  18.  <\/div><\/li>
  19. echo<\/span> "create database vsftpd, user\/password vsftpd\/vsftpd"<\/span>:<\/div><\/li>
  20. mysql --user<\/span>=root --password<\/span>=root -e<\/span> "CREATE USER 'vsftpd'@'localhost' IDENTIFIED BY 'vsftpd';"<\/span><\/div><\/li>
  21. mysql --user<\/span>=root --password<\/span>=root -e<\/span> "CREATE DATABASE IF NOT EXISTS vsftpd;"<\/span><\/div><\/li>
  22. mysql --user<\/span>=root --password<\/span>=root -e<\/span> "use vsftpd; GRANT ALL PRIVILEGES ON vsftpd.* TO 'vsftpd'@'localhost' WITH GRANT OPTION;"<\/span><\/div><\/li>
  23.  <\/div><\/li>
  24. echo<\/span> "initialize vsftpd table"<\/span><\/div><\/li>
  25. mysql --user<\/span>=root --password<\/span>=root -e<\/span> 'use vsftpd; CREATE TABLE IF NOT EXISTS `vsftpd`.`users` (`id_user` int(11) NOT NULL auto_increment,`login` varchar(50) NOT NULL,`password` varchar(100) NOT NULL,`active` int(11) NOT NULL,PRIMARY KEY  (`id_user`)) ENGINE=MyISAM AUTO_INCREMENT=4 DEFAULT CHARSET=latin1;'<\/span><\/div><\/li>
  26. mysql --user<\/span>=root --password<\/span>=root -e<\/span> 'use vsftpd; CREATE TABLE IF NOT EXISTS `vsftpd`.`log` (`id_log` int(11) NOT NULL auto_increment,`login` varchar(50) NOT NULL,`message` varchar(200) NOT NULL,`pid` varchar(10) NOT NULL,`host` varchar(30) NOT NULL,`time` datetime default NULL,PRIMARY KEY  (`id_log`)) ENGINE=MyISAM AUTO_INCREMENT=9 DEFAULT CHARSET=latin1;'<\/span><\/div><\/li>
  27.  <\/div><\/li>
  28. echo<\/span> "Configure \/etc\/vsftpd\/vsftpd.conf"<\/span><\/div><\/li>
  29. cat<\/span> ><\/span> \/<\/span>etc\/<\/span>vsftpd\/<\/span>vsftpd.conf <<<\/span> "EOF"<\/span><\/div><\/li>
  30. # Listen port<\/span><\/div><\/li>
  31. listen_port<\/span>=21<\/span><\/div><\/li>
  32.  <\/div><\/li>
  33. # You may fully customise the login banner string:<\/span><\/div><\/li>
  34. ftpd_banner<\/span>=Welcome to blah FTP service.<\/div><\/li>
  35.  <\/div><\/li>
  36. # PAM configuration file<\/span><\/div><\/li>
  37. pam_service_name<\/span>=vsftpd<\/div><\/li>
  38.  <\/div><\/li>
  39. # When "listen" directive is enabled, vsftpd runs in standalone mode and<\/span><\/div><\/li>
  40. # listens on IPv4 sockets. This directive cannot be used in conjunction<\/span><\/div><\/li>
  41. # with the listen_ipv6 directive.<\/span><\/div><\/li>
  42. listen<\/span>=YES<\/div><\/li>
  43.  <\/div><\/li>
  44. # Allow anonymous FTP? (Beware - allowed by default if you comment this out).<\/span><\/div><\/li>
  45. anonymous_enable<\/span>=NO<\/div><\/li>
  46. anon_world_readable_only<\/span>=NO<\/div><\/li>
  47. anon_upload_enable<\/span>=NO<\/div><\/li>
  48. anon_mkdir_write_enable<\/span>=NO<\/div><\/li>
  49. anon_other_write_enable<\/span>=NO<\/div><\/li>
  50.  <\/div><\/li>
  51. # Uncomment this to allow local users to log in.<\/span><\/div><\/li>
  52. local_enable<\/span>=YES<\/div><\/li>
  53.  <\/div><\/li>
  54. # Userlist file<\/span><\/div><\/li>
  55. userlist_file<\/span>=\/<\/span>etc\/<\/span>vsftpd\/<\/span>user_list<\/div><\/li>
  56. userlist_enable<\/span>=YES<\/div><\/li>
  57. userlist_deny<\/span>=YES<\/div><\/li>
  58.  <\/div><\/li>
  59. # Uncomment this to enable any form of FTP write command.<\/span><\/div><\/li>
  60. write_enable<\/span>=NO<\/div><\/li>
  61.  <\/div><\/li>
  62. # Allow un-anonymous guest users to connect to ftp (map to ftpsecure)<\/span><\/div><\/li>
  63. guest_enable<\/span>=YES<\/div><\/li>
  64. guest_username<\/span>=ftpsecure<\/div><\/li>
  65.  <\/div><\/li>
  66. # You may specify an explicit list of local users to chroot() to their home<\/span><\/div><\/li>
  67. # directory. If chroot_local_user is YES, then this list becomes a list of<\/span><\/div><\/li>
  68. # users to NOT chroot().<\/span><\/div><\/li>
  69. chroot_local_user<\/span>=YES<\/div><\/li>
  70.  <\/div><\/li>
  71. # Maximum number of simultaneous connection<\/span><\/div><\/li>
  72. max_clients<\/span>=50<\/span><\/div><\/li>
  73.  <\/div><\/li>
  74. # Maximum number of connections from the same IP<\/span><\/div><\/li>
  75. # Note, if you set value to 1, you won't be able to upload \/ download files (because it will create a new connection)<\/span><\/div><\/li>
  76. max_per_ip<\/span>=10<\/span><\/div><\/li>
  77.  <\/div><\/li>
  78. # Record specific user configuration<\/span><\/div><\/li>
  79. user_config_dir<\/span>=\/<\/span>etc\/<\/span>vsftpd\/<\/span>vsftpd_user_conf<\/div><\/li>
  80.  <\/div><\/li>
  81. # The target log file can be vsftpd_log_file or xferlog_file.<\/span><\/div><\/li>
  82. # This depends on setting xferlog_std_format parameter<\/span><\/div><\/li>
  83. xferlog_enable<\/span>=YES<\/div><\/li>
  84.  <\/div><\/li>
  85. # PASV - passive ports for FTP (range 44000 - 44100 ; 100 PASV ports, OPEN FIREWALL FOR ALLOWING CONNECTIONS<\/span><\/div><\/li>
  86. pasv_enable<\/span>=YES<\/div><\/li>
  87. pasv_min_port<\/span>=44000<\/span><\/div><\/li>
  88. pasv_max_port<\/span>=44100<\/span><\/div><\/li>
  89. EOF<\/div><\/li>
  90. chmod<\/span> 600<\/span> \/<\/span>etc\/<\/span>vsftpd\/<\/span>vsftpd.conf<\/div><\/li>
  91.  <\/div><\/li>
  92. echo<\/span> "Add non-privileged user ftpsecure"<\/span><\/div><\/li>
  93. useradd -G<\/span> users<\/span> -s<\/span> \/<\/span>sbin\/<\/span>nologin -d<\/span> \/<\/span>home\/<\/span>ftpsecure  ftpsecure<\/div><\/li>
  94.  <\/div><\/li>
  95. echo<\/span> "configure pam_mysql"<\/span><\/div><\/li>
  96. cat<\/span> ><\/span> \/<\/span>etc\/<\/span>pam.d\/<\/span>vsftpd <<<\/span> "EOF"<\/span><\/div><\/li>
  97. #%PAM-1.0<\/span><\/div><\/li>
  98. auth sufficient pam_unix.so<\/div><\/li>
  99. account sufficient pam_unix.so<\/div><\/li>
  100. auth required \/<\/span>lib64\/<\/span>security\/<\/span>pam_mysql.so verbose<\/span>=0<\/span> user<\/span>=vsftpd passwd<\/span>=vsftpd host<\/span>=127.0.0.1 db<\/span>=vsftpd table<\/span>=users<\/span> usercolumn<\/span>=login<\/span> passwdcolumn<\/span>=password crypt<\/span>=3<\/span> where<\/span>=users.active=1<\/span> sqllog<\/span>=yes<\/span> logtable<\/span>=log logmsgcolumn<\/span>=message logusercolumn<\/span>=login<\/span> logpidcolumn<\/span>=pid loghostcolumn<\/span>=host logtimecolumn<\/span>=time<\/span><\/div><\/li>
  101. account required \/<\/span>lib64\/<\/span>security\/<\/span>pam_mysql.so verbose<\/span>=0<\/span> user<\/span>=vsftpd passwd<\/span>=vsftpd host<\/span>=127.0.0.1 db<\/span>=vsftpd table<\/span>=users<\/span> usercolumn<\/span>=login<\/span> passwdcolumn<\/span>=password crypt<\/span>=3<\/span> where<\/span>=users.active=1<\/span> sqllog<\/span>=yes<\/span> logtable<\/span>=log logmsgcolumn<\/span>=message logusercolumn<\/span>=login<\/span> logpidcolumn<\/span>=pid loghostcolumn<\/span>=host logtimecolumn<\/span>=time<\/span><\/div><\/li>
  102. EOF<\/div><\/li>
  103.  <\/div><\/li>
  104. echo<\/span> "generate script to create new user"<\/span><\/div><\/li>
  105. mkdir<\/span> -p<\/span> \/<\/span>opt\/<\/span>vsftpd\/<\/span>scripts<\/div><\/li>
  106. cat<\/span> ><\/span> \/<\/span>opt\/<\/span>vsftpd\/<\/span>scripts\/<\/span>user_create.bash <<<\/span> "EOF"<\/span><\/div><\/li>
  107. #!\/bin\/bash<\/span><\/div><\/li>
  108.  <\/div><\/li>
  109. EXPECTED_ARGS<\/span>=2<\/span><\/div><\/li>
  110.  <\/div><\/li>
  111. if<\/span> [<\/span> $#<\/span> -ne<\/span> $EXPECTED_ARGS<\/span> ]<\/span><\/div><\/li>
  112. then<\/span><\/div><\/li>
  113.   echo<\/span> "Usage: `basename $0`<\/span> {user} {password}"<\/span><\/div><\/li>
  114.   exit<\/span> 1<\/span><\/div><\/li>
  115. fi<\/span><\/div><\/li>
  116.  <\/div><\/li>
  117. user<\/span>=$1<\/span><\/div><\/li>
  118. password<\/span>=$2<\/span><\/div><\/li>
  119.  <\/div><\/li>
  120. echo<\/span> "create new user $user<\/span>\/$password<\/span> (i.e. user\/password)"<\/span><\/div><\/li>
  121. mysql --user<\/span>=root --password<\/span>=root -e<\/span> 'use vsftpd; INSERT INTO `vsftpd`.`users` (`id_user`, `login`, `password`, `active`) VALUES (NULL, "'<\/span>$user<\/span>'", MD5("'<\/span>$password<\/span>'"), 1);'<\/span><\/div><\/li>
  122.  <\/div><\/li>
  123. mkdir<\/span> -p<\/span> mkdir<\/span> \/<\/span>home\/<\/span>ftpsecure\/<\/span>$user<\/span><\/div><\/li>
  124. chown<\/span> ftpsecure:users \/<\/span>home\/<\/span>ftpsecure\/<\/span>$user<\/span> -R<\/span><\/div><\/li>
  125. chmod<\/span> 700<\/span> \/<\/span>home\/<\/span>ftpsecure\/<\/span>$user<\/span> -R<\/span><\/div><\/li>
  126.  <\/div><\/li>
  127. # configuration file<\/span><\/div><\/li>
  128. echo<\/span> "local_root=$user<\/span>"<\/span> ><\/span> \/<\/span>etc\/<\/span>vsftpd\/<\/span>vsftpd_user_conf\/<\/span>$user<\/span><\/div><\/li>
  129. echo<\/span> "write_enable=YES"<\/span> >><\/span> \/<\/span>etc\/<\/span>vsftpd\/<\/span>vsftpd_user_conf\/<\/span>$user<\/span><\/div><\/li>
  130. echo<\/span> "anon_upload_enable=YES"<\/span> >><\/span> \/<\/span>etc\/<\/span>vsftpd\/<\/span>vsftpd_user_conf\/<\/span>$user<\/span><\/div><\/li>
  131. echo<\/span> "anon_mkdir_write_enable=YES"<\/span> >><\/span> \/<\/span>etc\/<\/span>vsftpd\/<\/span>vsftpd_user_conf\/<\/span>$user<\/span><\/div><\/li>
  132. echo<\/span> "anon_other_write_enable=YES"<\/span> >><\/span> \/<\/span>etc\/<\/span>vsftpd\/<\/span>vsftpd_user_conf\/<\/span>$user<\/span><\/div><\/li>
  133.  <\/div><\/li>
  134. EOF<\/div><\/li>
  135.  <\/div><\/li>
  136.  <\/div><\/li>
  137. cat<\/span> ><\/span> \/<\/span>opt\/<\/span>vsftpd\/<\/span>scripts\/<\/span>user_disable.bash <<<\/span> "EOF"<\/span><\/div><\/li>
  138. #!\/bin\/bash<\/span><\/div><\/li>
  139.  <\/div><\/li>
  140. EXPECTED_ARGS<\/span>=1<\/span><\/div><\/li>
  141.  <\/div><\/li>
  142. if<\/span> [<\/span> $#<\/span> -ne<\/span> $EXPECTED_ARGS<\/span> ]<\/span><\/div><\/li>
  143. then<\/span><\/div><\/li>
  144.   echo<\/span> "Usage: `basename $0`<\/span> {user}"<\/span><\/div><\/li>
  145.   exit<\/span> 1<\/span><\/div><\/li>
  146. fi<\/span><\/div><\/li>
  147.  <\/div><\/li>
  148. user<\/span>=$1<\/span><\/div><\/li>
  149.  <\/div><\/li>
  150. mysql --user<\/span>=root --password<\/span>=root -e<\/span> 'use vsftpd; UPDATE `vsftpd`.`users` SET `active` = '<\/span>0<\/span>' WHERE `users`.`login` ="'<\/span>$user<\/span>'";'<\/span><\/div><\/li>
  151. EOF<\/div><\/li>
  152.  <\/div><\/li>
  153. cat<\/span> ><\/span> \/<\/span>opt\/<\/span>vsftpd\/<\/span>scripts\/<\/span>user_enable.bash <<<\/span> "EOF"<\/span><\/div><\/li>
  154. #!\/bin\/bash<\/span><\/div><\/li>
  155.  <\/div><\/li>
  156. EXPECTED_ARGS<\/span>=1<\/span><\/div><\/li>
  157.  <\/div><\/li>
  158. if<\/span> [<\/span> $#<\/span> -ne<\/span> $EXPECTED_ARGS<\/span> ]<\/span><\/div><\/li>
  159. then<\/span><\/div><\/li>
  160.   echo<\/span> "Usage: `basename $0`<\/span> {user}"<\/span><\/div><\/li>
  161.   exit<\/span> 1<\/span><\/div><\/li>
  162. fi<\/span><\/div><\/li>
  163.  <\/div><\/li>
  164. user<\/span>=$1<\/span><\/div><\/li>
  165.  <\/div><\/li>
  166. mysql --user<\/span>=root --password<\/span>=root -e<\/span> 'use vsftpd; UPDATE `vsftpd`.`users` SET `active` = '<\/span>1<\/span>' WHERE `users`.`login` ="'<\/span>$user<\/span>'";'<\/span><\/div><\/li>
  167. EOF<\/div><\/li>
  168.  <\/div><\/li>
  169. cat<\/span> ><\/span> \/<\/span>opt\/<\/span>vsftpd\/<\/span>scripts\/<\/span>user_delete.bash <<<\/span> "EOF"<\/span><\/div><\/li>
  170. #!\/bin\/bash<\/span><\/div><\/li>
  171.  <\/div><\/li>
  172. EXPECTED_ARGS<\/span>=1<\/span><\/div><\/li>
  173.  <\/div><\/li>
  174. if<\/span> [<\/span> $#<\/span> -ne<\/span> $EXPECTED_ARGS<\/span> ]<\/span><\/div><\/li>
  175. then<\/span><\/div><\/li>
  176.   echo<\/span> "Usage: `basename $0`<\/span> {user}"<\/span><\/div><\/li>
  177.   exit<\/span> 1<\/span><\/div><\/li>
  178. fi<\/span><\/div><\/li>
  179.  <\/div><\/li>
  180. user<\/span>=$1<\/span><\/div><\/li>
  181.  <\/div><\/li>
  182. mysql --user<\/span>=root --password<\/span>=root -e<\/span> 'use vsftpd; DELETE FROM `vsftpd`.`users` WHERE `users`.`login` = "'<\/span>$user<\/span>'"'<\/span><\/div><\/li>
  183.  <\/div><\/li>
  184. rm<\/span> -f<\/span> \/<\/span>etc\/<\/span>vsftpd\/<\/span>vsftpd_user_conf\/<\/span>$user<\/span><\/div><\/li>
  185. rm<\/span> -fr<\/span> \/<\/span>home\/<\/span>ftpsecure\/<\/span>$user<\/span><\/div><\/li>
  186. EOF<\/div><\/li>
  187.  <\/div><\/li>
  188. echo<\/span> "create \/etc\/vsftpd\/vsftpd_user_conf directory"<\/span><\/div><\/li>
  189. mkdir<\/span> -p<\/span> \/<\/span>etc\/<\/span>vsftpd\/<\/span>vsftpd_user_conf<\/div><\/li>
  190.  <\/div><\/li>
  191. echo<\/span> "create new user myuser\/mypassword (i.e. user\/password)"<\/span><\/div><\/li>
  192. bash<\/span> \/<\/span>opt\/<\/span>vsftpd\/<\/span>scripts\/<\/span>user_create.bash myuser mypassword<\/div><\/li>
  193.  <\/div><\/li>
  194. echo<\/span> "launch vsftpd at startup"<\/span><\/div><\/li>
  195. systemctl enable<\/span> vsftpd.service<\/div><\/li>
  196.  <\/div><\/li>
  197. echo<\/span> "launch vsftpd"<\/span><\/div><\/li>
  198. systemctl start vsftpd.service<\/div><\/li>
  199.  <\/div><\/li>
  200. myip<\/span>=`<\/span>hostname<\/span> -I`<\/span><\/div><\/li>
  201. echo<\/span> "Now meet you there: ftp:\/\/$myip<\/span>"<\/span><\/div><\/li>
  202. echo<\/span> "NOTE: try to connect using login\/password : myuser\/mypassword"<\/span><\/div><\/li>
  203.  <\/div><\/li><\/ol><\/pre>\n
    That’s all \ud83d\ude42<\/p>\n","protected":false},"excerpt":{"rendered":"
    Prerequiste I assume that you have a Centos installation. Installation You can copy\/paste this script and use it to configure automatically your server. That’s all \ud83d\ude42<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":679,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"footnotes":""},"class_list":["post-708","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/blog.rabahi.net\/index.php?rest_route=\/wp\/v2\/pages\/708","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.rabahi.net\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/blog.rabahi.net\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/blog.rabahi.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.rabahi.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=708"}],"version-history":[{"count":4,"href":"https:\/\/blog.rabahi.net\/index.php?rest_route=\/wp\/v2\/pages\/708\/revisions"}],"predecessor-version":[{"id":1039,"href":"https:\/\/blog.rabahi.net\/index.php?rest_route=\/wp\/v2\/pages\/708\/revisions\/1039"}],"up":[{"embeddable":true,"href":"https:\/\/blog.rabahi.net\/index.php?rest_route=\/wp\/v2\/pages\/679"}],"wp:attachment":[{"href":"https:\/\/blog.rabahi.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=708"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}