vsftpd ：500 OOPS: cannot change directory:

用户昵称不能为空 2014-09-09 01:17:25

使用的是linux centos7，selinux已经关闭。
创建用户 xxx.com，指向目录/var/virtual/xxx.com，开启vsftpd，可以直接ftp登录。
修改目录 /var/virtual/xxx.com 的chown 为 xxx.com:apache，出现访问域名，提示403.
将chown apache: -R /var/virtual/xxx.com，访问正常，但是vsftpd就登录不了了，因为目录不是该用户的。



Forbidden



You don't have permission to access / on this server.

打印的命令：



[root@localhost ~]# ls -la /var/virtual

total 12

drwxrwxr-x  3 root   root   4096 Sep  9 00:50 .

drwxr-xr-x 23 root   root   4096 Sep  8 23:54 ..

drwxrw----  5 apache apache 4096 Sep  9 00:50 xxx.com



[root@localhost ~]# ftp localhost

Trying ::1...

ftp: connect to address ::1Connection refused

Trying 127.0.0.1...

Connected to localhost (127.0.0.1).

220 (vsFTPd 3.0.2)

Name (localhost:root): xxx.com

331 Please specify the password.

Password:

500 OOPS: cannot change directory:/var/virtual/xxx.com

Login failed.

ftp> exit

[root@localhost ~]# uname -a

Linux localhost.localdomain 3.15.4-x86_64-linode45 #1 SMP Mon Jul 7 08:42:36 EDT                       

 2014 x86_64 x86_64 x86_64 GNU/Linux

[root@localhost ~]#





[root@localhost ~]# grep xxx.com /etc/passwd

xxx.com:x:1000:48::/var/virtual/xxx.com:/bin/bash

[root@localhost ~]# grep apache /etc/passwd

apache:x:48:48:Apache:/usr/share/httpd:/sbin/nologin

[root@localhost ~]# finger xxx.com

Login: xxx.com                        Name:

Directory: /var/virtual/xxx.com       Shell: /bin/bash

Never logged in.

No mail.

No Plan.

[root@localhost ~]# finger apache

Login: apache                           Name: Apache

Directory: /usr/share/httpd             Shell: /sbin/nologin

Never logged in.

No mail.

No Plan.

...全文

672 9 打赏收藏转发到动态举报

写回复

用AI写文章

9 条回复

切换为时间正序

请发表友善的回复…

发表回复

donwmufromdying 2014-09-15

打赏
举报

这样，我给个我的安装脚本给你看看，我们因为安全原因使用的是虚拟用户。

#!/bin/bash
echo "-------------Begin install xgs ftp server-------------"
NUM=`which vsftpd|wc -l`
if [ $NUM -eq 0 ]; then
    echo "Now install vsftpd."
    apt-get install vsftpd
    if [ $? -ne 0 ]; then
        echo "Install vsftpd failed! abort!"
        exit 1
    fi
fi

NUM=`which db_load|wc -l`
if [ $NUM -eq 0 ]; then
    echo "Now install db-util."
    apt-get install db-util
    if [ $? -ne 0 ]; then
        echo "Install db-util failed! abort!"
        exit 1
    fi
fi

if [ ! -d /etc/vsftpd_user_conf ]; then
    mkdir -p /etc/vsftpd_user_conf
    if [ $? -ne 0 ]; then
        echo "Make directory /etc/vsftpd_user_conf failed! abort!"
        exit 1
    fi
fi

cat > /etc/vsftpd_user_conf/vsftpd_virtual_users.txt << !
guest
guest
vip
vip
admin
admin
!

db_load -T -t hash -f /etc/vsftpd_user_conf/vsftpd_virtual_users.txt /etc/vsftpd_user_conf/vsftpd_virtual_users.db
if [ $? -ne 0 ]; then
    echo "Excute db_load virtual users failed! abort!"
    exit 1
fi

rm /etc/vsftpd_user_conf/vsftpd_virtual_users.txt
chmod 600 /etc/vsftpd_user_conf/vsftpd_virtual_users.db


#/lib/i386-linux-gnu/security/pam_userdb.so
cat > /etc/pam.d/vsftpd << !
auth required /lib/i386-linux-gnu/security/pam_userdb.so db=/etc/vsftpd_user_conf/vsftpd_virtual_users
account required /lib/i386-linux-gnu/security/pam_userdb.so db=/etc/vsftpd_user_conf/vsftpd_virtual_users
!

groupadd ftpusr
useradd xgsftp -d /home/ftpshare -g ftpusr -s /bin/bash
mkdir -p /home/ftpshare/IMAGE
mkdir -p /home/ftpshare/UPDATE
chown -hR xgsftp /home/ftpshare
chgrp -hR ftpusr /home/ftpshare
chmod 500 /home/ftpshare

cat >> /etc/vsftpd.conf << !
user_config_dir=/etc/vsftpd_user_conf
local_enable=YES
local_root=/home/ftpshare
guest_enable=YES
guest_username=xgsftp
chroot_local_user=YES
max_clients=100
max_per_ip=1
!

cat > /etc/vsftpd_user_conf/guest << !
write_enable=YES
anon_upload_enable=YES
anon_mkdir_write_enable=YES
anon_world_readable_only=NO
download_enable=NO
dirlist_enable=NO
!

cat > /etc/vsftpd_user_conf/vip << !
write_enable=YES
anon_upload_enable=YES
anon_mkdir_write_enable=YES
anon_world_readable_only=NO
download_enable=YES
!

cat > /etc/vsftpd_user_conf/admin << !
write_enable=YES
anon_upload_enable=YES
anon_mkdir_write_enable=YES
anon_world_readable_only=NO
download_enable=YES
anon_other_write_enable=YES
!

service vsftpd restart

echo "-------------Install xgs ftp server success!-------------"

donwmufromdying 2014-09-11

打赏
举报

1、你是使用虚拟用户还是系统实际用户登录的 2、对应的权限设置，目录权限chmod

用户昵称不能为空 2014-09-11

打赏
举报

引用 7 楼 foxyz 的回复:

1、你是使用虚拟用户还是系统实际用户登录的 2、对应的权限设置，目录权限chmod

实际的登录用户，通过useradd 添加的用户。

用户昵称不能为空 2014-09-10

打赏
举报

引用 3 楼 zhxianbin 的回复:

http://xg2007524.blog.51cto.com/869106/506759 http://my.oschina.net/u/267081/blog/156954 看看有用不

我的selinux是完全关闭 disabled的，他说的那几个根本无法执行。当我把那个目录的所有者设置为当前用户的时候才可以访问的。 chown xxx.com -R /var/virtual/xxx.com 但是网站无法访问了提示403.

用户昵称不能为空 2014-09-10

打赏
举报

引用 4 楼 micropentium6 的回复:

[quote=引用 2 楼 default7 的回复:] [quote=引用 1 楼 micropentium6 的回复:] so, you allows anonymous login?

开启了，但是登录还是提示 500错误。


[root@localhost vsftpd]# ftp localhost
Trying ::1...
ftp: connect to address ::1Connection refused
Trying 127.0.0.1...
Connected to localhost (127.0.0.1).
220 (vsFTPd 3.0.2)
Name (localhost:root): xxx.com
331 Please specify the password.
Password:
500 OOPS: cannot change directory:/var/virtual/xxx.com
Login failed.
ftp> exit

[root@localhost vsftpd]# ls -l /var/virtual/xxx.com
total 12
drwxrwxr-x 2 apache apache 4096 Sep  9 00:50 backup
drwxrwxr-x 2 apache apache 4096 Sep  9 00:51 logs
drwxrwxr-x 2 apache apache 4096 Sep  9 23:28 public_html
[root@localhost vsftpd]#

[/quote] is xxx.com a system account or virtual account under vsftpd?[/quote] system account。


[root@localhost xxx.com]# grep xxx.com /etc/passwd
xxx.com:x:1000:48::/var/virtual/xxx.com:/bin/bash
[root@localhost xxx.com]# grep apache /etc/passwd
apache:x:48:48:Apache:/usr/share/httpd:/sbin/nologin

小笨和漂向北方 2014-09-10

打赏
举报

so, you allows anonymous login?

小笨和漂向北方 2014-09-10

打赏
举报

引用 2 楼 default7 的回复:

[quote=引用 1 楼 micropentium6 的回复:] so, you allows anonymous login?

开启了，但是登录还是提示 500错误。


[root@localhost vsftpd]# ftp localhost
Trying ::1...
ftp: connect to address ::1Connection refused
Trying 127.0.0.1...
Connected to localhost (127.0.0.1).
220 (vsFTPd 3.0.2)
Name (localhost:root): xxx.com
331 Please specify the password.
Password:
500 OOPS: cannot change directory:/var/virtual/xxx.com
Login failed.
ftp> exit

[root@localhost vsftpd]# ls -l /var/virtual/xxx.com
total 12
drwxrwxr-x 2 apache apache 4096 Sep  9 00:50 backup
drwxrwxr-x 2 apache apache 4096 Sep  9 00:51 logs
drwxrwxr-x 2 apache apache 4096 Sep  9 23:28 public_html
[root@localhost vsftpd]#

[/quote] is xxx.com a system account or virtual account under vsftpd?

zhxianbin 2014-09-10

打赏
举报

http://xg2007524.blog.51cto.com/869106/506759 http://my.oschina.net/u/267081/blog/156954 看看有用不

用户昵称不能为空 2014-09-10

打赏
举报

引用 1 楼 micropentium6 的回复:

so, you allows anonymous login?

开启了，但是登录还是提示 500错误。


[root@localhost vsftpd]# ftp localhost
Trying ::1...
ftp: connect to address ::1Connection refused
Trying 127.0.0.1...
Connected to localhost (127.0.0.1).
220 (vsFTPd 3.0.2)
Name (localhost:root): xxx.com
331 Please specify the password.
Password:
500 OOPS: cannot change directory:/var/virtual/xxx.com
Login failed.
ftp> exit

[root@localhost vsftpd]# ls -l /var/virtual/xxx.com
total 12
drwxrwxr-x 2 apache apache 4096 Sep  9 00:50 backup
drwxrwxr-x 2 apache apache 4096 Sep  9 00:51 logs
drwxrwxr-x 2 apache apache 4096 Sep  9 23:28 public_html
[root@localhost vsftpd]#