vsftpd安装，配置虚拟用户脚本

#!/bin/bash

#vsftpd install script

IP=$(ifconfig eth0 | grep -i "bcast" | awk -F: '{print $2}' | awk '{print $1}')

PORT=2525

VUSER=vuser

FTPUSER=webadm

FTPPW=mypasswd:123.com

ROOTDIR=/test

#iptables selinux

if [ -s /etc/selinux/config ] && grep "SELINUX=enforcing" /etc/selinux/config;

then

sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config

setenforce 0

fi

service iptables stop

chkconfig iptables off

#start install

yum -y install vsftpd db4-utils

cd /etc/vsftpd

cat >> vuser.txt << EOF

$FTPUSER

$FTPPW

EOF

db_load -T -t hash -f vuser.txt vuser.db

chmod 600 vuser.*

cat >> /etc/pam.d/vuser << EOF

#%PAM-1.0

auth required pam_userdb.so db=/etc/vsftpd/vuser

account required pam_userdb.so db=/etc/vsftpd/vuser

EOF

useradd -s /sbin/nologin $VUSER

mv /etc/vsftpd/vsftpd.conf /etc/vsftpd/vsftpd.conf.bak

cat >> /etc/vsftpd/vsftpd.conf << EOF

#global config

anonymous_enable=NO

local_enable=YES

write_enable=YES

local_umask=022

dirmessage_enable=YES

xferlog_enable=YES

connect_from_port_20=YES

xferlog_std_format=YES

listen=YES

listen_address=$IP

listen_port=$PORT

pasv_enable=YES

pasv_min_port=24500

pasv_max_port=24600

max_clients=20

max_per_ip=5

anon_umask=022

#vuser config

pam_service_name=vuser

userlist_enable=YES

tcp_wrappers=YES

guest_enable=YES

guest_username=$VUSER

user_config_dir=/etc/vsftpd/user_dir

EOF

mkdir $ROOTDIR

/usr/bin/setfacl -R -m d:user:$VUSER:rwx $ROOTDIR

mkdir /etc/vsftpd/user_dir

cat >> /etc/vsftpd/user_dir/$FTPUSER << EOF

local_root=$ROOTDIR

anon_upload_enable=YES

anon_world_readable_only=NO

anon_mkdir_write_enable=YES

anon_other_write_enable=YES

EOF

chkconfig vsftpd on

service vsftpd restart