vsftpd + pam_mysql + mysql do ftp server

First, the preparatory work;
I introduced and vsftpd configuration pam_mysql, it is not prepared on how to install, the specific needs of the installation package are: vsftpd
pam
pam_mysql
mysql-server
mysql vsftpd is what we want to use FTP server program.
pam password of a user authentication examination procedures, a lot of Linux users to log on the following certification, he can use to complete.
mysql is pam_mysql the pam authentication module.
mysql-server MySQL server program
mysql client program to connect over the console through the yum package or apt-get install, or rpm, or source code through the compiler installation, the use of the software see:
"Fedora / Redhat Package Management Guide" can be used after installation to look at the rpm where installed in the end, the configuration file where:

[root @ dreammaker ~] # rpm-qc vsftpd
/ etc / logrotate.d / vsftpd.log
/ etc / pam.d / vsftpd
/ etc / vsftpd / ftpusers
/ etc / vsftpd / user_list
/ etc / vsftpd / vsftpd.conf
/ etc / vsftpd / vsftpd_conf_migrate.sh
IMPORTANT: Here we also need to know whether the machine is installed SELinux, if installed, what kind of configuration.
Use the following code:

[root @ dreammaker ~] # rpm-qa | grep selinux
libselinux-1.23.10-2
selinux-policy-targeted-1.23.16-6

If you do not return any results, the representative had not been installed with SELinux, if returned to a similar result of the above, then the system is installed SELinux, then we need to know how he is configured to run in what way.

[root @ dreammaker ~] # more / etc / selinux / config
# This file controls the state of SELinux on the system.
# SELINUX = can take one of these three values:
# Enforcing - SELinux security policy is enforced.
# Permissive - SELinux prints warnings instead of enforcing.
# Disabled - SELinux is fully disabled.
SELINUX = enforcing
# SELINUXTYPE = type of policy in use. Possible values are:
# Targeted - Only targeted network daemons are protected.
# Strict - Full SELinux protection.
SELINUXTYPE = targeted

Return to results above, SELINUX the meaning of the three values are:
disabled the function of a total ban on SELinux
permissive use of SELinux to verify the operation of the strategy document, the time when the operation are not allowed to issue a warning, but allowed to continue the implementation of the operation rather than to stop operations. Suitable for the use of SELinux will not know what the impact of system use.
enforcing the use of SELinux to verify the operation of the strategy document, the time when the operation are not allowed to direct the implementation of the prohibition of the operation. SELINUXTYPE the meaning of the two values is:
targeted only to specific domain of the X-rated the following strategies to start the process of inspection, the domain for unrestricted operation of the process of the following is not a strategy document check.
strict will check all the strategy process, are designed for different security level for the domain of the strategy for better control, you can create multi-level hierarchical control strategy. In this paper, SELinux is not prepared to detail the knowledge of other, related documents can be found http://www.nsa.gov/selinux/ If SELINUX is set to disable or permissive, then we can not control the following part of the SELinux settings, otherwise, please note SELinux see some of the following tips. First wrote here today, the unfinished work, please do not Polymerization!

0 评论:

发表评论