论坛徽章:: 0

电梯直达

1楼 [收藏(0)] [报告]

发表于 2009-03-12 16:07 |只看该作者 |倒序浏览

RHEL4.0+Pureftp+Webpureftp+Mysql+Zend Optimizer实现一个功能较全面的FTP服务系统：

实验环境：
本实验的环境采取系统是RHEL4.0以及上面所提到的相关软件；
构成简单的C/S系统，其中RHEL4.0除了成为FTP服务器之外还充当DNS服务器以及WEB服务器角色。
服务器IP地址为：192.168.1.10，FQDN为server.jerrywjl.com，客户端为WindowsXP，IP地址为192.168.1.1

以下为实验步骤：
首先配置基本的网络参数以及相关的FTP和WEB服务，配置的目的是实现三个解析：
server.jerrywjl.com、ftp.jerrywjl.com、www.jerrywjl.com
这个过程比较简单，所以具体步骤在实验中略过，只是强调一下步骤：
1.配置主机名称FQDN；
2.配置主机TCP/IP服务以及DNS服务以及启动DNS服务；
3.配置并启动Apache服务
在Apache主配置文档中更改下面两处：
在原来AddDefaultCharset UTF-8下添加一行——AddDefaultCharset GB2312；
将文档中的主机名更改为ftp.jerrywjl.com；
最后保存并启动服务进行http服务测试。

配置完成之后，基本环境算是准备完成，现在安装Mysql并且进行Mysql服务配置与测试：
首先装Mysql的软件包：
[root@server RPMS]# rpm -ihv --aid mysql-server-4.1.7-4.RHEL4.1.i386.rpm
[root@server RPMS]# rpm -ihv --aid mysqlclient10-*
[root@server RPMS]# rpm -ihv --aid mysql-devel-4.1.7-4.RHEL4.1.i386.rpm
[root@server RPMS]# rpm -ihv --aid php-mysql-4.3.9-3.1.i386.rpm

完成之后启动服务，并且设置Mysql服务器密码以及进行登录测试：
[root@server ~]# service mysqld start
Initializing MySQL database:  [  OK  ]
Starting MySQL:  [  OK  ]
[root@server ~]# chkconfig mysqld on
[root@server ~]# mysqladmin -u root password 123456
[root@server ~]# mysql -u root -p
Enter password:
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 4 to server version: 4.1.7

Type 'help;' or '\h' for help. Type '\c' to clear the buffer.

mysql> show databases;
+-------------+
| Database    |
+-------------+
| mysql          |
| test          |
+-------------+
2 rows in set (0.00 sec)

mysql> quit
Bye
[root@server ~]#

下面开始安装pure-ftpd服务软件，在此之前，首先获取所有的试验中需要的软件包：
这就是实验所需要的软件：
[root@server ~]# cd /usr/local/packages/
[root@server packages]# ls
pure-ftpd-1.0.20.tar.gz  webpureftp0.1.tar.gz  ZendOptimizer-2.5.10a-linux-glibc21-i386.tar.gz
[root@server packages]# ll
total 4656
-rwxr-xr-x  1 root root  561412 Mar 21 22:30 pure-ftpd-1.0.20.tar.gz
-rwxr-xr-x  1 root root  196917 Mar 21 22:30 webpureftp0.1.tar.gz
-rwxr-xr-x  1 root root 3973599 Mar 21 22:30 ZendOptimizer-2.5.10a-linux-glibc21-i386.tar.gz
先安装pure-ftpd：
[root@server packages]# mkdir temp
[root@server packages]# tar -zxf pure-ftpd-1.0.20.tar.gz -C temp/
[root@server packages]#
[root@server packages]# cd temp/pure-ftpd-1.0.20/
[root@server pure-ftpd-1.0.20]#
[root@server pure-ftpd-1.0.20]# cd

[root@server ~]# vi install_pureftpd                            ————这是pureftpd的安装脚本
内容如下：
cd /usr/local/packages/temp/pure-ftpd-1.0.20             ————解压后pureftp所在的目录
./configure \
--prefix=/usr/local/pureftpd \                                     ————指定安装目录
--with-mysql \                                                       ————支持使用Mysql保存虚拟帐号
--with-virtualchroot \                                              ————可以使用户在自己主目录下通过添加符号链接的方式访问其他原本
                                                                                    不允许chroot的目录
--with-virtualhosts \                                                 ————允许虚拟主机
--with-virtualroot \                                                 ————支持虚拟root根目录
--with-diraliases \                                                    ————支持目录别名
--with-uploadscript \                ————支持当一个上传完成之后，自动启用额外程序和脚本
--with-cookie \                      ————支持当用户登录时显示定制信息
--with-quotas \                      ————开启磁盘配额功能
--with-sysquotas \                   ————允许使用操作系统磁盘配额
--with-ratios \                         ————支持上传/下载比例
--with-throttling \                   ————支持带宽限制
--with-largefile \                      ————支持下载大于2G文件
--with-peruserlimits \                ————开启限制同一个帐号可以同时登录的个数
--with-paranoidmsg \             ————无论何种原因登录失败都显示失败原因
--with-welcomemsg \                ———— 显示欢迎信息
--with-language=simplified-chinese                               ————使用简体中文作为软件界面
完成之后保存退出，给予该文件可执行文件，并且按照脚本方式来执行安装操作。
[root@server ~]# chmod 755 install_pureftpd
[root@server ~]# ./install_pureftpd
上述操作执行了编译前的环境配置，如下：
checking for a BSD-compatible install... /usr/bin/install -c
checking whether build environment is sane... yes
checking for gawk... gawk
checking whether make sets $(MAKE)... yes
checking for a BSD-compatible install... /usr/bin/install -c
checking for ranlib... ranlib
checking for gcc... gcc
checking for C compiler default output file name... a.out
checking whether the C compiler works... yes
checking whether we are cross compiling... no
…………………………………………………………………
configure: You have /dev/urandom - Great
configure: You have /dev/random - Great
configure: creating ./config.status
config.status: creating Makefile
config.status: creating src/Makefile
config.status: creating pam/Makefile
config.status: creating man/Makefile
config.status: creating gui/Makefile
config.status: creating configuration-file/Makefile
config.status: creating contrib/Makefile
config.status: creating m4/Makefile
config.status: creating configuration-file/pure-ftpd.conf
config.status: creating configuration-file/pure-config.pl
config.status: creating configuration-file/pure-config.py
config.status: creating puredb/Makefile
config.status: creating puredb/src/Makefile
config.status: creating pure-ftpd.spec
config.status: creating config.h
config.status: executing depfiles commands
configure: +--------------------------------------------------------------------------+
configure: | You can subscribe to the Pure-FTPd users mailing-list                               |
configure: | to ask for help and to stay informed of new releases.                               |
configure: | Go to http://www.pureftpd.org/ml/ now!                                              |
configure: +--------------------------------------------------------------------------+

进入指定目录进行编译并且安装：
[root@server ~]# cd /usr/local/packages/temp/pure-ftpd-1.0.20/
[root@server ~]# cd /usr/local/packages/temp/pure-ftpd-1.0.20/
[root@server pure-ftpd-1.0.20]# make
[root@server pure-ftpd-1.0.20]# make install
生成配置脚本：
[root@server pure-ftpd-1.0.20]# cp configuration-file/pure-config.pl /usr/local/pureftpd/sbin/
更改配置脚本权限：
[root@server pure-ftpd-1.0.20]# chmod +x /usr/local/pureftpd/sbin/pure-config.pl
生成ftp的服务主目录：
[root@server pure-ftpd-1.0.20]# mkdir /ftproot
以下要生成pure-ftp服务管理脚本：
[root@server pure-ftpd-1.0.20]# cd contrib/
[root@server contrib]# vi redhat.init
将其中下面的语句：
fullpath=/usr/local/sbin/$prog
pureftpwho=/usr/local/sbin/pure-ftpwho
更改为：
fullpath=/usr/local/pureftpd/sbin/$prog
pureftpwho=/usr/local/pureftpd/sbin/pure-ftpwho
将该文件复制到/etc/init.d目录中并且重命名为pure-ftpd
[root@server contrib]# cp redhat.init /etc/init.d/pure-ftpd
并且更改该文件为可执行：
[root@server contrib]# chmod +x /etc/init.d/pure-ftpd
将该服务添加到启动服务列表并配置该服务随系统启动而启动：
[root@server contrib]# chkconfig --add pure-ftpd
[root@server contrib]# chkconfig pure-ftpd on
由于pure-ftpd将FTP匿名用户映射到名为ftp的系统帐号，所以ftp系统帐号的主目录就是FTP匿名用户的主目录。如果需要FTP服务器允许匿名登录，就需要建立一个名为ftp的系统帐号，而且该帐号的主目录必须存在。默认情况下pure-ftpd安装的时候已经建立了ftp帐号，但是该帐号默认的主目录/var/ftp不存在，所以要建立/var/ftp，但是如果系统中已经安装vsftp服务的话，该目录会自动建立。因为如果希望FTP匿名用户能够上传文件，就保证ftp系统帐号对主目录有写入权限：
[root@server contrib]# chown ftp.ftp /var/ftp

现在开始安装对pure-ftpd进行管理的基于web的管理工具webpureftp，但是因为该软件的PHP源代码使用了ZendEncode进行了加密，所以需要安装Zend Oprimizer才可以执行webpureftp目录中加密的PHP程序。否则会出现乱码。因此现在安装ZendEncode：
[root@server ~]# cd /usr/local/packages/
[root@server packages]# ls
pure-ftpd-1.0.20.tar.gz  webpureftp0.1.tar.gz
temp                   ZendOptimizer-2.5.10a-linux-glibc21-i386.tar.gz
[root@server packages]# tar -zxf ZendOptimizer-2.5.10a-linux-glibc21-i386.tar.gz -C temp/
[root@server packages]# cd temp/ZendOptimizer-2.5.10a-linux-glibc21-i386/
[root@server ZendOptimizer-2.5.10a-linux-glibc21-i386]# ./install.sh
通过上述操作，会有一个安装向导，建议接受全部的默认条件：
1．是否接受协议————是
2．Zend安装目录是否/usr/local/Zend————是
3．确认php.ini配置文件是否在/etc/目录中————是
4．是否使用Apache作为默认的WEB服务器————是
5．Apache默认的控制路径是否是/usr/sbin/apachectl目录————是
6．是否重启Apache服务————是

注意这里的提示：
The following configuration changes have been made:
         x - The php.ini file has been relocated from /etc to /usr/local/Zend/etc  x
         x - A symbolic link for the php.ini file has been created in /etc.       x
         x - The original php.ini was backed up to /etc/php.ini-zend_optimizer.bak       x
在上述的完成过程中，可能会碰到Zend Optimizer与SELinux的配合问题。
主要因为Zend在安装时需要修改/etc/php.ini文件的内容，并将该文件替换为一个符号链接文件，指向/usr/local/Zend/etc/php.ini，所以造成Apache服务器在每次启动都会违反SELinux的规则出错。
解决的方法有两种：

第一种：在整个配置之前关闭SELinux：
[root@server ~]# vi /etc/sysconfig/selinux
针对下面的内容：
# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
#    enforcing - SELinux security policy is enforced.
#    permissive - SELinux prints warnings instead of enforcing.
#    disabled - SELinux is fully disabled.
SELINUX=enforcing
# SELINUXTYPE= type of policy in use. Possible values are:
#    targeted - Only targeted network daemons are protected.
#    strict - Full SELinux protection.
SELINUXTYPE=targeted
将SELINUX=enforcing更改为SELINUX=disabled并且重新启动系统

第二种：在没有更改该配置文件情况下使用下面命令设置文件相关安全属性：
[root@server ~]# rm -f /etc/php.ini
[root@server ~]# cp /usr/local/Zend/etc/php.ini /etc/
[root@server ~]# chcon -u system_u /etc/php.ini
[root@server ~]# chcon -t shlib_t /usr/local/Zend/lib/ZendExtensionManager.so
[root@server ~]# chcon -t shlib_t /usr/local/Zend/lib/Optimizer-2.5.10/php-4.3.x/ZendOptimizer.so

下面开始生成Mysql数据库，通过webpureftp软件的安装可以实现管理pure-ftpd和mysql结构中的php帐户，方法如下：
[root@server ~]# cd /usr/local/packages/
[root@server packages]# tar -zxf webpureftp0.1.tar.gz -C temp/

下面开始对主配置文件进行修改：
[root@server ~]# cd /usr/local/packages/
[root@server packages]# tar -zxf webpureftp0.1.tar.gz -C temp/
[root@server packages]# cd temp/webpureftp0.1/
[root@server webpureftp0.1]#
[root@server webpureftp0.1]# vi SQL/pureftp_0.1.sql
找到DROP TABLE IF EXISTS `depart_info`;这句，在前面加上：
CREATE DATABASE pureftp;
USE pureftp;

那么整段成为：
CREATE DATABASE pureftp;
USE pureftp;
DROP TABLE IF EXISTS `depart_info`;
CREATE TABLE `depart_info` (
  `id` int(4) NOT NULL auto_increment,
  `name` varchar(30) NOT NULL default '',
  PRIMARY KEY  (`id`),
  KEY `id` (`id`)
) TYPE=MyISAM AUTO_INCREMENT=21 ;
保存退出。
最后执行命令生成mysql数据库：

[root@server webpureftp0.1]# mysql -u root -p < SQL/pureftp_0.1.sql
Enter password:
[root@server webpureftp0.1]#

测试：
[root@server webpureftp0.1]# mysql -u root -p
Enter password:
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 8 to server version: 4.1.7

Type 'help;' or '\h' for help. Type '\c' to clear the buffer.

mysql> show databases;
+-------------+
| Database    |
+-------------+
| mysql       |
| pureftp       |
| test          |
+-------------+
3 rows in set (0.01 sec)

mysql> use pureftp;
Reading table information for completion of table and column names
You can turn off this feature to get a quicker startup with -A

Database changed
mysql> show tables;
+------------------------+
| Tables_in_pureftp       |
+------------------------+
| depart_info                |
| ftp_users                   |
| ftp_users_info             |
| user_info                   |
+------------------------+
4 rows in set (0.00 sec)

mysql> quit
Bye
[root@server webpureftp0.1]#

现在修改pure-ftpd的主配置文件
[root@server webpureftp0.1]# cd docs/
[root@server docs]# vi pureftpd-mysql.conf，更改下列语句：
将：
MYSQLUser    network       更改为：       MYSQLUser    root
将：
MYSQLPassword 123456       更改为：       MYSQLPassword 123456
（由于我这里就是使用123456，所以不改）

将：
MYSQLDatabase network                      更改为：       MYSQLDatabase pureftp

完成之后复制下面两个文件到/etc/目录下：
[root@server docs]# cp pure-ftpd.conf /etc
[root@server docs]# cp pureftpd-mysql.conf /etc

最后一步，开始配置webpureftp，进入webpureftp解压目录，也就是刚才的webpureftp0.1编辑config子目录中的config.inc.php文件，将其中的路径修改是实际路径，将口令也修改为实际口令：
[root@server docs]# pwd
/usr/local/packages/temp/webpureftp0.1/docs
[root@server docs]# cd ..
[root@server webpureftp0.1]# vi config/config.inc.php
下面是原来未修改的内容：
<?php
$orig_title = "Web PureFTPÂ¹ÃœÃ

文库|博客

jerrywjl

大富大贵

论坛徽章:: 0

2楼 [报告]

发表于 2009-03-12 16:08 |只看该作者

该管理系统主要实现帐号的添加以及管理工作，至于pure-ftp的操作，还必须要修改该服务的主配置文件，并且启动该服务。Pure-ftp的服务配置文件在/etc/pure-ftpd.conf中。
针对该配置文件，可以作如下更改：
[root@server temp]# vi /etc/pure-ftpd.conf

############################################################
#                                                                                                                   #
#       Configuration file for pure-ftpd wrappers                                                    #
#                                                                                                                   #
############################################################

# If you want to run Pure-FTPd with this configuration
# instead of command-line options, please run the
# following command :
#
# /usr/local/pureftpd/sbin/pure-config.pl /usr/local/pureftpd/etc/pure-ftpd.conf
#
# Please don't forget to have a look at documentation at
# http://www.pureftpd.org/documentation.html for a complete list of
# options.

# Cage in every user in his home directory

ChrootEveryone             yes             ————是否将所有用户锁定到自身目录中

# If the previous option is set to "no", members of the following group
# won't be caged. Others will be. If you don't want chroot()ing anyone,
# just comment out ChrootEveryone and TrustedGID.

# TrustedGID                   100

# Turn on compatibility hacks for broken clients

BrokenClientsCompatibility  no

# Maximum number of simultaneous users

MaxClientsNumber          50

# Fork in background

Daemonize                yes

# Maximum number of sim clients with the same IP address

MaxClientsPerIP          8                      ————每个IP地址的最大连接数

# If you want to log all client commands, set this to "yes".
# This directive can be duplicated to also log server responses.

VerboseLog                no

# List dot-files even when the client doesn't send "-a".

DisplayDotFiles          yes

# Don't allow authenticated users - have a public anonymous FTP only.

AnonymousOnly             no             ————是否只允许匿名用户连接

# Disallow anonymous connections. Only allow authenticated users.

NoAnonymous                no             ————是否允许匿名用户登录

# Syslog facility (auth, authpriv, daemon, ftp, security, user, local*)
# The default facility is "ftp". "none" disables logging.

SyslogFacility             ftp

# Display fortune cookies

# FortunesFile             /usr/share/fortune/zippy
FortunesFile          /etc/ftpmsg             ————设置欢迎信息文件位置

# Don't resolve host names in log files. Logs are less verbose, but
# it uses less bandwidth. Set this to "yes" on very busy servers or
# if you don't have a working DNS.

DontResolve                yes


# Maximum idle time in minutes (default = 15 minutes)

MaxIdleTime                15             ————设置用户空隙那时间超过限制

# LDAP configuration file (see README.LDAP)

# LDAPConfigFile             /etc/pureftpd-ldap.conf

# MySQL configuration file (see README.MySQL)

MySQLConfigFile             /etc/pureftpd-mysql.conf

# Postgres configuration file (see README.PGSQL)

# PGSQLConfigFile             /etc/pureftpd-pgsql.conf

# PureDB user database (see README.Virtual-Users)

# PureDB                      /etc/pureftpd.pdb

# Path to pure-authd socket (see README.Authentication-Modules)

# ExtAuth                      /var/run/ftpd.sock

# If you want to enable PAM authentication, uncomment the following line

# PAMAuthentication          yes

# If you want simple Unix (/etc/passwd) authentication, uncomment this

# UnixAuthentication          yes

# Please note that LDAPConfigFile, MySQLConfigFile, PAMAuthentication and
# UnixAuthentication can be used only once, but they can be combined
# together. For instance, if you use MySQLConfigFile, then UnixAuthentication,
# the SQL server will be asked. If the SQL authentication fails because the
# user wasn't found, another try # will be done with /etc/passwd and
# /etc/shadow. If the SQL authentication fails because the password was wrong,
# the authentication chain stops here. Authentication methods are chained in
# the order they are given.

# 'ls' recursion limits. The first argument is the maximum number of
# files to be displayed. The second one is the max subdirectories depth

LimitRecursion             2000 8

# Are anonymous users allowed to create new directories ?

AnonymousCanCreateDirs    no             ————是否允许匿名用户建立目录

# If the system is more loaded than the following value,
# anonymous users aren't allowed to download.

MaxLoad                   4

# Port range for passive connections replies. - for firewalling.

# PassivePortRange       30000 50000             ————用于连接的被动端口范围

# Force an IP address in PASV/EPSV/SPSV replies. - for NAT.
# Symbolic host names are also accepted for gateways with dynamic IP
# addresses.

# ForcePassiveIP             192.168.0.1

# Upload/download ratio for anonymous users.

# AnonymousRatio             1 10

# Upload/download ratio for all users.
# This directive superscedes the previous one.

# UserRatio                1 10

# Disallow downloading of files owned by "ftp", ie.
# files that were uploaded but not validated by a local admin.

AntiWarez                yes             ————是否允许下载由匿名用户上传的文件

# IP address/port to listen to (default=all IP and port 21).

# Bind                   127.0.0.1,21             ————设置服务器绑定的地址和端口

# Maximum bandwidth for anonymous users in KB/s

# AnonymousBandwidth          8             ————设置匿名用户可以使用的带宽

# Maximum bandwidth for *all* users (including anonymous) in KB/s
# Use AnonymousBandwidth *or* UserBandwidth, both makes no sense.

# UserBandwidth          8             ————设置本地用户可以使用的带宽

# File creation mask. <umask for files>:<umask for dirs> .
# 177:077 if you feel paranoid.

Umask                      133:022

# Minimum UID for an authenticated user to log in.

MinUID                   100

# Allow FXP transfers for authenticated users only.

AllowUserFXP             yes

# Allow anonymous FXP for anonymous and non-anonymous users.

AllowAnonymousFXP          no

# Users can't delete/write files beginning with a dot ('.')
# even if they own them. If TrustedGID is enabled, this group
# will have access to dot-files, though.

ProhibitDotFilesWrite    no

# Prohibit *reading* of files beginning with a dot (.history, .ssh...)

ProhibitDotFilesRead       no

# Never overwrite files. When a file whoose name already exist is uploaded,
# it get automatically renamed to file.1, file.2, file.3, ...

AutoRename                no

# Disallow anonymous users to upload new files (no = upload is allowed)

AnonymousCantUpload       no             ————是否允许匿名用户上传文件

# Only connections to this specific IP address are allowed to be
# non-anonymous. You can use this directive to open several public IPs for
# anonymous FTP, and keep a private firewalled IP for remote administration.
# You can also only allow a non-routable local IP (like 10.x.x.x) to
# authenticate, and keep a public anon-only FTP server on another IP.

#TrustedIP                10.1.1.1

# If you want to add the PID to every logged line, uncomment the following
# line.

LogPID                   yes

# Create an additional log file with transfers logged in a Apache-like format :
# fw.c9x.org - jedi [13/Dec/1975:19:36:39] "GET /ftp/linux.tar.bz2" 200 21809338
# This log file can then be processed by www traffic analyzers.

#AltLog                   clf:/tmp/pureftpd.log

# Create an additional log file with transfers logged in a format optimized
# for statistic reports.

#AltLog                   stats:/tmp/pureftpd.log

# Create an additional log file with transfers logged in the standard W3C
# format (compatible with most commercial log analyzers)

#AltLog                   w3c:/var/log/pureftpd.log

# Disallow the CHMOD command. Users can't change perms of their files.

#NoChmod                   yes

# Allow users to resume and upload files, but *NOT* to delete them.

#KeepAllFiles             yes

# Automatically create home directories if they are missing

CreateHomeDir             yes             ————设置是否自动建立用户主目录

# Enable virtual quotas. The first number is the max number of files.
# The second number is the max size of megabytes.
# So 1000:10 limits every user to 1000 files and 10 Mb.

#Quota                      1000:10

# If your pure-ftpd has been compiled with standalone support, you can change
# the location of the pid file. The default is /var/run/pure-ftpd.pid

#PIDFile                   /var/run/pure-ftpd.pid

# If your pure-ftpd has been compiled with pure-uploadscript support,
# this will make pure-ftpd write info about new uploads to
# /var/run/pure-ftpd.upload.pipe so pure-uploadscript can read it and
# spawn a script to handle the upload.

#CallUploadScript yes

# This option is useful with servers where anonymous upload is
# allowed. As /var/ftp is in /var, it save some space and protect
# the log files. When the partition is more that X percent full,
# new uploads are disallowed.

MaxDiskUsage             99

# Set to 'yes' if you don't want your users to rename files.

#NoRename                yes

# Be 'customer proof' : workaround against common customer mistakes like
# 'chmod 0 public_html', that are valid, but that could cause ignorant
# customers to lock their files, and then keep your technical support busy
# with silly issues. If you're sure all your users have some basic Unix
# knowledge, this feature is useless. If you're a hosting service, enable it.

CustomerProof             yes

# Per-user concurrency limits. It will only work if the FTP server has
# been compiled with --with-peruserlimits (and this is the case on
# most binary distributions) .
# The format is : <max sessions per user>:<max anonymous sessions>
# For instance, 3:20 means that the same authenticated user can have 3 active
# sessions max. And there are 20 anonymous sessions max.

# PerUserLimits          3:20             设置每个用户最大并发连接数

# When a file is uploaded and there is already a previous version of the file
# with the same name, the old file will neither get removed nor truncated.
# Upload will take place in a temporary file and once the upload is complete,
# the switch to the new version will be atomic. For instance, when a large PHP
# script is being uploaded, the web server will still serve the old version and
# immediatly switch to the new one as soon as the full file will have been
# transfered. This option is incompatible with virtual quotas.

# NoTruncate             yes

# This option can accept three values :
# 0 : disable SSL/TLS encryption layer (default).
# 1 : accept both traditional and encrypted sessions.
# 2 : refuse connections that don't use SSL/TLS security mechanisms,
#    including anonymous sessions.
# Do _not_ uncomment this blindly. Be sure that :
# 1) Your server has been compiled with SSL/TLS support (--with-tls),
# 2) A valid certificate is in place,
# 3) Only compatible clients will log in.

# TLS                   1

# Listen only to IPv4 addresses in standalone mode (ie. disable IPv6)
# By default, both IPv4 and IPv6 are enabled.

# IPV4Only                yes

# Listen only to IPv6 addresses in standalone mode (ie. disable IPv4)
# By default, both IPv4 and IPv6 are enabled.

# IPV6Only                yes

对该文件修改完毕后重启服务：
[root@server temp]# /etc/init.d/pure-ftpd start
Starting pure-config.pl: Running: /usr/local/pureftpd/sbin/pure-ftpd --daemonize -A -c50 -B -C8 -D -fftp -F/etc/ftpmsg -H -I15 -lmysql:/etc/pureftpd-mysql.conf -L2000:8 -m4 -s -U133:022 -u100 -w -1 -j -k99 -Z

[root@server temp]# chkconfig pure-ftpd on
[root@server temp]#
此时使用命令行进行访问测试，会出现下列窗口：
[root@server temp]# ftp
ftp> open 192.168.1.10
Connected to 192.168.1.10.
220---------- »¶Ó¬À´µ½ Pure-FTPd ----------
220-ÄúÊÇµÚ 1 ¸öÊ¹ÓÃÕß£¬×î¶à¿É´ï 50 ¸öÁ¬½Ó
220-ÏÖÔÚ±¾µØÊ±¼äÊÇ 00:05¡£•þÎñÆ÷¶Ë¿Ú£º 21¡£
220-Õâ²¿Ö÷»úÒ²»¶Ó¬IPv6µÄÁ¬½Ó
220 ÔÚ 15 •ÖÖÓÄÚÃ»ÓÐ»î¶¯£¬Äú±»»á¶ÏÏß¡£
500 °²È«À©³äÏîÎ´ÊµÊ©
500 °²È«À©³äÏîÎ´ÊµÊ©
KERBEROS_V4 rejected as an authentication type
Name (192.168.1.10:root):
可以使用匿名帐号登录服务器。

其他对账号的控制在WEB界面中完成，试验到此成功！

[ 本帖最后由 jerrywjl 于 2009-3-12 16:13 编辑 ]