vsftpd+pam_mysql+mysql

hnjzsxn

RH9.0上实现,转载请保留作者信息,谢谢!
一、安装相关软件包
mysql-5.0.41
pam_mysql-0.7RC1
vsftpd-2.0.5
openssl-0.98e
1.安装mysql-5.0.41
#groupadd mysql
#useradd -g mysql -s /sbin/nologin -M mysql
#tar zxvf mysql-5.0.41.tar.gz
#cd mysql-5.0.41
#./configure --prefix=/usr/local/mysql --sysconfdir=/etc --enable-thread-safe-client --enable-local-infile --with-charset=gbk --with-extra-charset=all --with-low-memory
#make
#make install
#cp support-files/my-medium.cnf /etc/my.cnf
#cd /usr/local/mysql
#chgrp -R mysql .
#bin/mysql_install_db --user=mysql
#chown -R root .
#chown -R mysql var
#bin/mysqld_safe --user=mysql &
#cd /usr/local/src/mysql-5.0.41
#cp support/mysql.server /etc/rc.d/init.d/mysqld
#chmod 700 /etc/rc.d/init.d/mysqld
#chkconfig --add mysqld
#chkconfig --level 345 mysqld on
测试
#/usr/local/mysql/bin/mysqladmin ping
#/usr/local/mysql/bin/mysqladmin version
#/usr/local/mysql/bin/mysql
添加root密码
#/usr/local/mysql/bin/mysqladmin -uroot -p 旧密码 password '新密码'
修改库文件的搜索路径
#vi /etc/ld.so.conf
添加如下条目：
/usr/local/mysql/lib/mysql
增加库文件及头文件的链接
ln -s /usr/local/mysql/lib/mysql /usr/lib/mysql
ln -s /usr/local/mysql/include/mysql /usr/include/mysql
2.安装openssl-0.9.8e
#tar zxvf openssl-0.9.8e.tar.gz
#cd openssl-0.9.8e
#./config shared zlib
#make
#make test
#make install
mv /usr/bin/openssl /usr/bin/openssl.OFF
mv /usr/include/openssl /usr/include/openssl.OFF
ln -s /usr/local/ssl/bin/openssl /usr/bin/openssl
ln -s /usr/local/ssl/include/openssl /usr/include/openssl
配置库文件搜索路径
#echo "/usr/local/ssl/lib" >> /etc/ld.so.conf
#ldconfig -v
3.安装pam_mysql-0.7RC1
#tar zxvf  pam_mysql-0.7RC1.tar.gz
#cd  pam_mysql-0.7RC1
#./configure --with-mysql=/usr/local/mysql --with-openssl=/usr/local/ssl
#make
#make install
#cp /usr/lib/security/pam_mysql.so /lib/security/
4.安装vsftpd-2.0.5
#mkdir -pv /usr/share/empty   /var/ftp
#useradd -s /bin/false -d /var/ftp ftp
#tar xzvf vsftpd-2.0.5.tar.gz
#cd vsftpd-2.0.5
#make
#make install
安装配置文件
#cp vsftpd.conf /etc
编辑配置文件/etc/vsftpd.conf
添加：listen=YES
启动服务器
#/usr/local/sbin/vsftpd &
#chmod og-w /var/ftp
二、配置
1.准备数据库及相关表
在此，我们建立名为vsftp的数据库来存放相关虚拟用户的帐号
mysql> create database vsftp;
mysql> grant select on vsftp.* to vsftpd@localhost identified by '123456';
mysql> grant select on vsftp.* to
vsftpd@127.0.0.1
identified by '123456';
mysql> use vsftp;
mysql> create table users (
    -> id int AUTO_INCREMENT NOT NULL,
    -> name char(20) binary NOT NULL,
    -> passwd char(48) binary NOT NULL,
    -> primary key(id)
    -> );
添加测试的虚拟用户,其密码采取加密存放的方式
mysql> insert into users(name,passwd) values('benet',password('123456'));
mysql> insert into users(name,passwd) values('aptech',password('123456'));
查看结果
mysql> select * from users;
+----+-----------+----------------------------------------------------------------------------+
| id | name    | passwd                                                                              |
+----+-----------+----------------------------------------------------------------------------+
|  1 | benet    | *6BB4837EB74329105EE4568DDA7DC67ED2CA2AD9 |
|  2 | aptech  | *6BB4837EB74329105EE4568DDA7DC67ED2CA2AD9 |
+----+-----------+----------------------------------------------------------------------------+
3 rows in set (0.00 sec)
2.建立pam认证所需文件
#vi /etc/pam.d/vsftp.mysql
添加如下两行
auth required /lib/security/pam_mysql.so user=vsftpd passwd=123456 host=localhost db=vsftp table=users
usercolumn=name passwdcolumn=passwd crypt=2
account required /lib/security/pam_mysql.so user=vsftpd passwd=123456 host=localhost db=vsftp table=users
usercolumn=name passwdcolumn=passwd crypt=2
3.修改vsftpd的配置文件，使其适应mysql认证
建立虚拟用户映射的系统用户及对应的目录
#useradd -s /sbin/nologin -d /var/ftp2 vsftp
#chmod go+rx /var/ftp2
请确保/etc/vsftpd.conf中已经启用了以下选项
anonymous_enable=YES
local_enable=YES
write_enable=YES
anon_upload_enable=NO
anon_mkdir_write_enable=NO
chroot_local_user=YES
添加以下选项
guest_enable=YES
guest_username=vsftp
listen=YES
pam_service_name=vsftpd.mysql
三、启动vsftpd服务
#/usr/local/sbin/vsftpd &
查看端口开启情况
# netstat -tnlp |grep :21
tcp        0      0 0.0.0.0:21              0.0.0.0:*               LISTEN      23286/vsftpd
使用虚拟用户登录,验正配置结果，以下为本机的命令方式测试，你也可以在其它Win Box上用IE或者FTP客户端工具登录验正
# ftp localhost
Connected to localhost (127.0.0.1).
220 (vsFTPd 2.0.5)
Name (localhost:root): benet
331 Please specify the password.
Password:
230 Login successful.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> ls
227 Entering Passive Mode (127,0,0,1,235,31)
150 Here comes the directory listing.
-rw-r--r--    1 0        0          155985 Jun 06 07:16 vsftpd-2.0.5.tar.gz
226 Directory send OK.


本文来自ChinaUnix博客，如果查看原文请点：http://blog.chinaunix.net/u2/66077/showart_684850.html