datouboy 2019-04-04 18:26 采纳率: 0%
浏览 3356

vsftpd 虚拟用户pam验证通不过,530 Login incorrect. (Centos7)

环境:Centos7.2
Vsftpd版本:3.0.2

SELinux 已关闭
防火墙已关闭
vconf目录正确,文件名正确
virtusers.db生成正确
虚拟用户用户名与vconf下文件名对应正确

本身这套配置应该没问题,因为已经配置过很多台服务器,都是使用的这套配置,唯独这台服务器,同样的配置,就不行了。

vsftpd.conf配置如下:

anonymous_enable=NO
local_enable=YES
write_enable=YES
local_umask=002
anon_upload_enable=NO
anon_mkdir_write_enable=NO
dirmessage_enable=YES
xferlog_enable=YES
connect_from_port_20=YES
chown_uploads=NO
xferlog_file=/opt/log/vsftpd/vsftpd.log
xferlog_std_format=YES
nopriv_user=vsftpd
async_abor_enable=YES
ascii_upload_enable=YES
ascii_download_enable=YES
ftpd_banner=Welcome to Alex FTP service.
chroot_local_user=YES
chroot_list_enable=NO
ls_recurse_enable=NO
listen=YES
pam_service_name=vsftpd
userlist_enable=YES
tcp_wrappers=YES
guest_enable=YES
guest_username=overlord
virtual_use_local_privs=YES
user_config_dir=/etc/vsftpd/vconf
listen_port=21
pasv_min_port=5000
pasv_max_port=5010

pam.d/vsftpd 配置如下:

#%PAM-1.0
auth       sufficient   pam_userdb.so     db=/etc/vsftpd/virtusers
account    sufficient   pam_userdb.so     db=/etc/vsftpd/virtusers
session    optional     pam_keyinit.so    force revoke
auth       required pam_listfile.so item=user sense=deny file=/etc/vsftpd/ftpusers onerr=succeed
auth       required pam_shells.so
auth       include  password-auth
account    include  password-auth
session    required     pam_loginuid.so
session    include  password-auth

FTP报错信息:

[root@debug010000002015 ~]# ftp XXX.29.190.XXX
Connected to XXX.29.190.XXX (XXX.29.190.XXX).
220 Welcome to Alex FTP service.
Name (XXX.29.190.XXX:root): dddboy
331 Please specify the password.
Password:
530 Login incorrect.
Login failed.
ftp> quit
221 Goodbye.

tail -f /var/log/secure 日志如下:

Apr 04 12:41:05 debug020000002019.local.alipay.net vsftpd[25977]: pam_unix(vsftpd:auth): check pass; user unknown
Apr 04 12:41:05 debug020000002019.local.alipay.net vsftpd[25977]: pam_unix(vsftpd:auth): authentication failure; logname= uid=0 euid=0 tty=ftp ruser=dlex rhost=158.147.202.138
Apr 04 14:14:51 debug020000002019.local.alipay.net vsftpd[27069]: pam_unix(vsftpd:auth): check pass; user unknown
Apr 04 14:14:51 debug020000002019.local.alipay.net vsftpd[27069]: pam_unix(vsftpd:auth): authentication failure; logname= uid=0 euid=0 tty=ftp ruser=dlex rhost=158.147.202.138
Apr 04 16:47:16 debug020000002019.local.alipay.net vsftpd[28786]: pam_unix(vsftpd:auth): check pass; user unknown
Apr 04 16:47:16 debug020000002019.local.alipay.net vsftpd[28786]: pam_unix(vsftpd:auth): authentication failure; logname= uid=0 euid=0 tty=ftp ruser=dddboy rhost=debug020000002019.local.alipay.net
Apr 04 16:54:35 debug020000002019.local.alipay.net vsftpd[28888]: pam_unix(vsftpd:auth): check pass; user unknown
Apr 04 16:54:35 debug020000002019.local.alipay.net vsftpd[28888]: pam_unix(vsftpd:auth): authentication failure; logname= uid=0 euid=0 tty=ftp ruser=aa rhost=debug020000002019.local.alipay.net
Apr 04 16:58:06 debug020000002019.local.alipay.net vsftpd[28933]: pam_unix(vsftpd:auth): check pass; user unknown
Apr 04 16:58:06 debug020000002019.local.alipay.net vsftpd[28933]: pam_unix(vsftpd:auth): authentication failure; logname= uid=0 euid=0 tty=ftp ruser=dlex rhost=158.147.202.138
  • 写回答

1条回答

  • binbin70 2019-04-10 13:48
    关注

    setsebool -P ftp_home_dir=1

    评论

报告相同问题?

悬赏问题

  • ¥15 phython路径名过长报错 不知道什么问题
  • ¥15 深度学习中模型转换该怎么实现
  • ¥15 HLs设计手写数字识别程序编译通不过
  • ¥15 Stata外部命令安装问题求帮助!
  • ¥15 从键盘随机输入A-H中的一串字符串,用七段数码管方法进行绘制。提交代码及运行截图。
  • ¥15 TYPCE母转母,插入认方向
  • ¥15 如何用python向钉钉机器人发送可以放大的图片?
  • ¥15 matlab(相关搜索:紧聚焦)
  • ¥15 基于51单片机的厨房煤气泄露检测报警系统设计
  • ¥15 Arduino无法同时连接多个hx711模块,如何解决?