注意:所有的环境是建立在关闭SELinux及Firewalld、iptables
1、本地用户模式使用的权限参数以及作用
2、锁定账户目录(只能看自己的目录)
[root@localhost~]# vim /etc/vsftpd/vsftpd.conf
anonymous_enable=NO
local_enable=YES
write_enable=YES
local_umask=022
dirmessage_enable=YES
xferlog_enable=YES
#connect_from_port_20=YES (默认情况下是主动模式 在生产环境中需要将FTP的工作模式改为被动模式)
connect_from_port_20=NO
xferlog_std_format=YES
chroot_list_enable=YES
chroot_list_file=/etc/vsftpd/chroot_list
allow_writeable_chroot=YES
local_root=/home/kali
local_root=/home/unix
listen=NO
listen_ipv6=YES
pam_service_name=vsftpd
userlist_enable=YES
tcp_wrappers=YES
[root@localhost ~] useradd -u 2018 kali
[root@localhost ~] useradd -u 2019 unix
[root@localhost ~]# echo 123456 | passwd —stdin kali
Changing password for user kali.
passwd: all authentication tokens updated successfully.
[root@localhost ~]# echo 123456 | passwd —stdin unix
Changing password for user unix.
passwd: all authentication tokens updated successfully.
[root@localhost ~] cat /etc/vsftpd/chroot_list
kali
unix
[root@localhost ~]# yum -y install ftp #安装FTP的客户端
[root@localhost ~]# ftp 172.16.2.20 (这里是使用ftp客户端连接)
Connected to 172.16.2.20 (172.16.2.20).
220 (vsFTPd 3.0.2)
Name (172.16.2.20:root): unix
331 Please specify the password.
Password:
230 Login successful.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> mkdir 1
257 “/home/unix/1” created
ftp> ls
227 Entering Passive Mode (172,16,2,20,198,202).
150 Here comes the directory listing.
drwxr-xr-x 2 2019 2019 6 Dec 18 05:39 1
226 Directory send OK.
ftp> exit
221 Goodbye.
Windwos连接 ftp://ip